auntieannes.com

HTML metadata

Title: Freshly Baked Soft Pretzels: Auntie Anne's Pretzels
Description: Auntie Anne’s is known for hand-baked pretzels to be enjoyed with a refreshing lemonade. Visit our website to stay up-to-date on current news & events!
Language: en
Canonical: https://www.auntieannes.com

Technology

CDN: Cloudflare
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (5)

cdn.optimizely.com×1
resources.digital-cloud-west.medallia.com×1
truyoproductionuscdn.truyo.com×1
www.google.com×1
www.googletagmanager.com×1

Registration

Registrar

MarkMonitor Inc.

Created

1998-03-25

Expires

2027-03-24 308 days left

Updated

2025-02-20

Name servers

ha1.markmonitor.zone
ha2.markmonitor.zone
ha3.markmonitor.zone
ha4.markmonitor.zone

DNS records live

NS

ha1.markmonitor.zone
ha2.markmonitor.zone
ha3.markmonitor.zone
ha4.markmonitor.zone

MX

10 us-smtp-inbound-1.mimecast.com
10 us-smtp-inbound-2.mimecast.com

TXT

Show 19 TXT records

google-site-verification=PD8TClS3Q7Yu5VgvpCYfArkT7gEJgg08tR-Fm3CmJ9w
v=verifydomain MS=1104225
atlassian-domain-verification=yL9rtb1CxUM7r6WMcutM27g7Jflrl12h5JZtaipFPr0fnpdIAy0Dwy3X2xh0W0d0
google-site-verification=HIQ-4HPi47XBMinroyyekF9iUZaGsj6Gpt8WQ8LUQc0
google-site-verification=kC4XkHic0N6bfAT9flbO59fZLCa-Si8TeEwRQto-TEM
smartsheet-site-validation=r1DijcLzxvtJzjplUfM6k72oZwmSoHDw
wrike-verification=MTQzMjIzMTphOTAyOTQ4MTIxMTg5OTdlNWVlOGE2Njc1M2Y5MmI0ZWZkYjc1ZTk3ZTRkODliNGU3YmI1MGUyNjQ1YThkNWRm
box-domain-verification=ef723833912567302b68da96e8a8d1e03329235a7d485b11c94078804dc8b9ff
fb-prod-utility.azurewebsites.net
ZOOM_verify_qYz2CPIOR_a77sfDlaudnQ
duo_sso_verification=EarpMd62B05emDtirTSYf5lVK3e1ARbOqUcEaPPkvQAJQaer5gFsZ62hPVURoWm8
google-site-verification=Xz_59GEUDFWv5KBikDL3T6OVj0RQGJISbv_0vqNGhjo
facebook-domain-verification=c54k4dyvfeofnalghuhlbwj532yufd
webexdomainverification.J8G4=2e5c97a4-1bfd-414f-af50-91262f2651eb
0ed1fe018a3fcbd688365f40a28825b553d8e34f54
fb-sitecore-prod-cd.azurewebsites.net.
f+IYbnvawv419QVn1/UpSHdf69jOQRhSZIHCO5ikKGud4MP7wA3x8fc8fzd5hiiIwC50bR/CK/yRlZB/n1CtLw==
202605070906333x5fspob37dbz22xag7mv8mu3mkq6iv5v755810y3uydc26mlk
ibmid=4b2ba6ca-9799-472d-8718-583d708fa676

Email authentication strong

SPF

v=spf1 include:_spf.auntieannes_com._d.easydmarc.pro ~all

softfail (~all)

DMARC

v=DMARC1;p=reject;pct=100;rua=mailto:16223669ec@rua.easydmarc.us;ruf=mailto:16223669ec@ruf.easydmarc.us;ri=86400;fo=1;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6sWVfJZhUtv7XhNLwiVA+N+VRTpEYubymtETqGgiMKIwmnazHB7h3rguV2So3y47AYcan8IBx/FuNfUYh2+…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/ZBN5d9JXaDiLafn1ocopQEt7QOK8JCx5rHAl70jg41a5sgXUoBDQ+CI2gqrqUVs6OlGKvD7NDaeD0ZSL…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+x5cIYm6IrjmnuNy/VpplMrSMbAHTixG6fgX3L2oJZdy2np+lCdl4zFzKW454mNbiSHECDbj20AFMl0DsIXdims…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2025-10-20 to 2026-11-21

Expires in 185 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.auntieannes.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: no-referrer-when-downgrade
permissions-policy: camera=(self), battery=(self), browsing-topics=(), geolocation=(self)
x-content-type-options: nosniff
content-security-policy: object-src 'self' data:; upgrade-insecure-requests; base-uri 'self'; frame-ancestors 'self' https://*.contentful.com; https://truyostagingcdn.truyo.com/ https://maps.googleapis.com/ https://www.google.com/recaptcha/ https://resources.digital-cloud-west.medallia.com/ http://resources.digital-cloud-west.medallia.com/ https://www.googletagmanager.com https://va.vercel-scripts.com/ https://cdn.quantummetric.com/ https://bat.bing.com/ https://sc-static.net/ https://static.hotjar.com/ https://js.adsrvr.org/ https://s.adroll.com/ https://connect.facebook.net/ https://try.abtasty.com/ https://tags.srv.stackadapt.com/ http://rum-static.pingdom.net/ https://analytics.tiktok.com/ https://d.adroll.com/ https://tr.snapchat.com/ https://truyoproductionuscdn.truyo.com/ https://vercel.live/ https://script.hotjar.com/ https://md-scp.kampyle.com/ https://hpc.uat.freedompay.com/ https://client.px-cloud.net/ https://olocdnsandbox.s3.amazonaws.com https://hpc.freedompay.com https://static.olocdn.net https:
strict-transport-security: max-age=31536000; includeSubDomains; preload