servsafebrands.com

.com crawl

First seen 2026-04-15 · Last seen 2026-05-14 · ok HTTP/1.1 200 2652 ms crawled 2026-05-10

US · 157.55.164.242 · AS8075 Microsoft Corporation

Reputation 100/100

Classifying

HTML metadata

Title: ServSafe Brands | ServSafe Brands
Language: en
Canonical: https://servsafebrands.com/

Open Graph

url: https://servsafebrands.com/
title: ServSafe Brands
locale: en-us
site name: ServSafeBrands

Technology

Server: Microsoft-IIS

Analytics

Google Tag Manager

Third-party hosts loaded (2)

go.restaurant.org×1
www.googletagmanager.com×1

Registration

Registrar

Network Solutions, LLC

Created

2023-01-13

Expires

2028-01-13 604 days left

Updated

2026-01-27

Name servers

ns71.worldnic.com
ns72.worldnic.com

DNS records live

NS

ns71.worldnic.com
ns72.worldnic.com

MX

0 servsafebrands-com.mail.protection.outlook.com

TXT

MS=ms84164411

Email authentication strong

SPF

v=spf1 ip4:65.52.5.185 ip4:157.56.30.48 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; pct=100; adkim=s; rua=mailto:dmarc@servsafebrands.com; ruf=mailto:dmarc@servsafebrands.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4Dr99paGFFxk6hwXX1u8biXzEZNMQMt0i+tBWucFielSXsjnUBfGphymniZvZXVEySnOTA2H5KJym…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2026-01-30 to 2027-01-31

Expires in 257 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://servsafebrands.com/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; style-src * 'unsafe-inline'; font-src * data:; frame-ancestors 'self' http://localhost:* https://tst-admin-servsafebrands-com.azurewebsites.net https://tst-admin.restauranthealthcare.org/ https://tst-ahlei.servsafebrands.com/ https://tst-admin-ahlei.servsafebrands.com/; frame-src https://*.servsafebrands.com https://*.restauranthealthcare.org https://s.stonly.com https://go.restaurant.org https://player.vimeo.com/ https://apps.usw2.pure.cloud https://www.google.com/;
strict-transport-security: max-age=2592000