migroskurumsal.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 1736 ms crawled 2026-05-19

NL · 52.137.30.76 · AS8075 Microsoft Corporation

Reputation 92/100 no dmarc policy

sector food type homepage

HTML metadata

Title: Migros Ticaret A.Ş. Kurumsal Web Sitesi
Description: Migros olarak sunduğumuz alışveriş deneyimi ile her zaman müşterilerimizin güvendiği ve tercih ettiği ilk adres olmak istiyoruz.
Language: tr
Canonical: https://www.migroskurumsal.com

Technology

Server: Microsoft-IIS

Third-party hosts loaded (3)

migroskurumsalstr.blob.core.windows.net×16
bundles.efilli.com×1
challenges.cloudflare.com×1

Social

Contact

Address: Atatürk Mah. Turgut Özal Bulvarı No:7, 34758, İstanbul, Ataşehir, TUR

Registration

Registrar

ODTU Gelistirme Vakfi Bilgi Teknolojileri Sanayi Ve Ticaret Anonim Sirketi

Created

2009-04-10

Expires

2027-04-10 324 days left

Updated

2026-03-11

Name servers

dnsa1.vodafone.net.tr
dnsa2.vodafone.net.tr

DNS records live

NS

dnsa1.vodafone.net.tr
dnsa2.vodafone.net.tr

MX

5 smtp-in01.dijitalisyerim.com
5 smtp-in02.dijitalisyerim.com

TXT

sUQgjXHC8+dnHJt7InX/zphCdAjJ1Kun4hEOwjblKu0=

Verified for

GlobalSign
Google

Email authentication weak

SPF: v=spf1 mx ip4:81.8.100.151 ip4:81.8.100.150 ip4:81.8.100.146 -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

GlobalSign RSA OV SSL CA 2018

from 2025-07-10 to 2026-08-10

Expires in 82 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://migroskurumsal.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self';default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' *.medianova.com *.msecnd.net *.azure.com *.cloudflare.com *.migros.com.tr *.migroskurumsal.com *.googleapis.com *.vimeo.com *.windows.net *.gstatic.com *.forinvestcdn.com 'report-sample' *.wonderchat.io *.efilli.com *.googletagmanager.com *.google-analytics.com *.google.com;style-src 'self' 'unsafe-inline' *.googleapis.com *.medianova.com *.cloudflare.com *.vimeo.com *.migros.com.tr *.migroskurumsal.com *.gstatic.com *.windows.net *.forinvestcdn.com *.google.com *.googletagmanager.com;object-src 'none';frame-src 'self' *.wonderchat.io *.cloudflare.com *.migros.com.tr *.migroskurumsal.com *.doubleclick.net *.windows.net *.googletagmanager.com *.youtube.com *.youtube-nocookie.com *.google.com;img-src 'self' data: blob: migroskurumsalstr.blob.core.windows.net *.medianova.com *.googleapis.com assets.efilli.com *.cloudflare.com tansasgross.com.tr *.google-analytics.com *.migros.com.tr migroskurumsal.co
strict-transport-security: max-age=31622400; includeSubDomains; preload