wyndhamsocial.com
HTML metadata
Technology
- Server
- Apache
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (1)
- www.googletagmanager.com×1
Social
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2021-12-31
- Expires
- 2026-12-31 224 days left
- Updated
- 2026-01-02
- Name servers
-
- ns01.domaincontrol.com
- ns02.domaincontrol.com
DNS records live
- NS
-
- ns01.domaincontrol.com
- ns02.domaincontrol.com
- MX
-
- 0 wyndhamsocial-com.mail.protection.outlook.com
- Verified for
-
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 include:spf.protection.outlook.com -allstrict (-all) - DMARC
-
v=DMARC1; p=none; sp=none; rua=mailto:spam-reports@wyndhamsocial.compolicy: none (monitoring only) · sp=none - DKIM
-
- k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
selectors probed - k2:
Certificate (current)
E8
Expires in 24 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak frame protection
- missing Permissions Policy
Header values
- referrer-policy
origin-when-cross-origin, no-referrer- x-frame-options
sameorigin, SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
connect-src 'self' *.google-analytics.com maps.googleapis.com api-public.addthis.com;default-src 'self';frame-ancestors 'none' ;base-uri 'self';img-src * 'self' data: https:;font-src * 'self' data: https:;script-src-elem 'unsafe-inline' *;frame-src *.google-analytics.com s7.addthis.com www.google.com maps.googleapis.com youtube.com www.youtube.com facebook.com www.facebook.com ssl.google-analytics.com www.googletagmanager.com ;media-src 'self' *.google-analytics.com maps.googleapis.com fonts.gstatic.com fonts.googleapis.com www.w3.org www.youtube.com www.facebook.com ssl.google-analytics.com www.googletagmanager.com;object-src data: 'unsafe-eval'; script-src 'self' 'unsafe-eval' *.google-analytics.com s7.addthis.com maps.googleapis.com fonts.gstatic.com fonts.googleapis.com www.w3.org youtube.com facebook.com code.jquery.com ssl.google-analytics.com www.googletagmanager.com ;style-src 'self' 'unsafe-inline' *.google-analytics.com maps.googleapis.com fonts.gstatic.com fonts.goo- strict-transport-security
max-age=31536000, max-age=10886400; includeSubDomains; preload