mein-aramark-restaurant.de
Registration
- Updated
- 2025-01-03
- Name servers
-
- ns81.domaincontrol.com.
- ns82.domaincontrol.com.
DNS records live
- NS
-
- ns81.domaincontrol.com
- ns82.domaincontrol.com
- MX
-
- 100 mxlb.ispgateway.de
- Verified for
-
Email authentication weak
- SPF
- not published
- DMARC
- not published
- DKIM
- no key found at common selectors
Certificate (current)
WR3
Expires in 82 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing frame protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-content-type-options
nosniff- content-security-policy
default-src 'self' https://qnips.blob.core.windows.net/ https://*.googleapis.com/ https://*.qnips.com/ https://*.qnips.net/ https://js.stripe.com/ https://*.cloudfunctions.net https://*.adyen.com https://login.microsoftonline.com https://vr-pay-ecommerce.de/ https://test.vr-pay-ecommerce.de/ https://oppwa.com/; script-src 'self' https://maps.googleapis.com/ https://js.stripe.com/ https://*.adyen.com https://www.gstatic.com https://vr-pay-ecommerce.de/ https://test.vr-pay-ecommerce.de/ https://oppwa.com/ 'sha256-gxlC5dNUScsRR73hpgiefQFnr0SIJ00lw81kPOEVYOs=' 'sha256-47THtjlCteV99EbR5PIVzdy98uKBtY/adKKN0D5WQlU=' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://*.adyen.com https://vr-pay-ecommerce.de/ https://test.vr-pay-ecommerce.de/ https://oppwa.com/; img-src 'self' data: https://*.cloudimg.io https://qnips.blob.core.windows.net/ https://*.qnips.com/ https://*.qnips.net/ https://maps.gstatic.com/ https://maps.googleapis.com/ https://play.google.com h- strict-transport-security
max-age=31556926