eliorgroup.com

HTML metadata

Title: Home | www.eliorgroup.com
Description: Elior Group, one of the world's leading operators in contract catering and support services, has become a benchmark player in the business & industry, education and healthcare. Operating in 5 countries, Elior Group is a leader in its main markets, in Europe and North America.
Language: en
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://www.eliorgroup.com/

Open Graph

url: https://www.eliorgroup.com/node
title: Elior Group : one of the world's leading operators in contract catering and support services
image:url: https://www.eliorgroup.com/sites/www.eliorgroup.com/files/2022-02/elior-groups-mission-fond-blanc.png
site name: www.eliorgroup.com

Technology

Server: Apache
CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (2)

www.googletagmanager.com×2
unpkg.com×1

Social

Registration

Registrar

Nameshield SAS

Created

2015-06-10

Expires

2027-06-10 386 days left

Updated

2025-12-17

Name servers

nsa.perf1.fr
nsb.perf1.com
nsc.perf1.com

DNS records live

NS

nsa.perf1.fr
nsb.perf1.com
nsc.perf1.com

MX

10 de-smtp-inbound-1.mimecast.com
10 de-smtp-inbound-2.mimecast.com

TXT

Show 7 TXT records

atlassian-domain-verification=jDHk1t/0WY7m74KTpbZJvBx/7O4SalyAwroi8Cg3TVwXSs4uhlCJz+LtRSW7saXL
apple-domain-verification=AQgzdl9gbIFYqMRw
include:spf-00319502.pphosted.com
google-site-verification=_HS2qGHzzZVwyoYc3of6l1CZqXW5rI9LavZKG7z6Xu8
docusign=964d625c-a645-4240-8704-f81730638558
U4DU11dQP07a8Ak5RtceAoHKtl6YlhHDOF2QfAXGrP29pAyDbeeGBAuQDNQDqX1m2t7Spr+yDp1rMrxLUbNBTQ==
v=spf1 ip4:195.25.81.52 ip4:185.189.236.99 ip4:31.170.13.56 ip4:31.170.13.57 ip4:31.170.13.41 ip4:31.170.12.1 ip4:31.170.12.2 ip4:31.170.12.3 include:de._netblocks.mimecast.com -all

Certificate (current)

R12

from 2026-04-04 to 2026-07-03

Expires in 44 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.eliorgroup.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self), microphone=(), camera=(), payment=()
x-content-type-options: nosniff, nosniff
content-security-policy: object-src 'none'; script-src 'self' 'report-sample' 'unsafe-eval' https://www.googletagmanager.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://unpkg.com https://www.google.com platform.twitter.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://kit.fontawesome.com https://unpkg.com https://connect.facebook.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://www.google.com platform.twitter.com; style-src 'self' 'report-sample' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'report-sample' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://cdn.jsdelivr.net https://cdnj
strict-transport-security: max-age=63072000; preload;