Access to this page has been denied

healthcare medical

news media journalism

documentation technical

adult content

government public service

English

__cf_bm

_pxhd

Within the Swedish country-code top-level domain (.se), 'www.foodora.se' is registered and includes subdomain 'www'. The second-level label 'foodora' is 7 characters long with 4 vowels and three consonants. Tokenizing the label suggests 3 words: food, or, a. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

html/9d/7f/9d7f6f42-0c67-4311-8c39-41c6eec7a46c_fallback.html.gz

default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

script-src 'report-sample' 'nonce-oQkUovPA6Y_Gcz-h6AFgqA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1

default-src 'self' *.incognia.com *.icg-in.com https://micro-assets.foodora.com; connect-src 'self' *.ingest.sentry.io *.fd-api.com *.deliveryhero.net *.deliveryhero.io https://images.dhmedia.io *.googleapis.com *.braze.com *.usercentrics.eu *.googletagmanager.com *.google-analytics.com stats.g.doubleclick.net *.incognia.com *.icg-in.com *.icg-in.info wss://*.incognia.com wss://*.icg-in.info wss://*.icg-in.com https://firebasedynamiclinks.googleapis.com https://www.accounts.google.com https://adservice.google.com *.adservice.google.com https://adservice.google.com/pagead/regclk googleads.g.doubleclick.net stats.g.doubleclick.net *.googleadservices.com https://analytics.google.com *.analytics.google.com https://api.avo.app *.px-cloud.net *.hotjar.io *.googlesyndication.com *.google.at *.google.bd *.google.cy *.google.cz *.google.ch *.google.fi *.google.fr *.google.hu *.google.jp *.google.hk *.google.la *.google.my *.google.nl *.google.no *.google.ph *.google.pk *.google.pl *.google.ru *.google.se *.google.sg *.google.tr *.google.tw *.google.de *.google.ca *.google.ae *.google.com *.google.com.at *.google.com.bd *.google.com.co *.google.com.cy *.google.com.cz *.google.com.fi *.google.com.hu *.google.com.in *.google.com.jp *.google.com.hk *.google.com.it *.google.com.kh *.google.com.la *.google.com.my *.google.com.nl *.google.com.no *.google.com.ph *.google.com.pk *.google.com.ru *.google.com.sa *.google.com.se *.google.com.sg *.google.com.tr *.google.com.tw *.google.com.de *.google.com.au *.google.com.mm *.google.com.ua *.google.co *.google.co.at *.google.co.bd *.google.co.cy *.google.co.cz *.google.co.fi *.google.co.hu *.google.co.in *.google.co.jp *.google.co.kh *.google.co.la *.google.co.my *.google.co.nl *.google.co.no *.google.co.ph *.google.co.pk *.google.co.ru *.google.co.se *.google.co.sg *.google.co.tr *.google.co.tw *.google.co.de *.google.co.th *.google.co.uk *.google.co.id *.google.co.kr https://www.google.com https://facebook.com *.facebook.com *.px-cdn.net *.pxchk.net *.px-client.net *.logs.datadoghq.eu https://logs.browser-intake-datadoghq.eu *.svc.cluster.local *.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://*.production.eu.fintech.deliveryhero.com https://helpcenter.usehurrier.com https://helpcenter-ap.usehurrier.com https://helpcenter-eu.usehurrier.com https://rum.browser-intake-datadoghq.eu wss://chat-staging-ws-sg.deliveryhero.io wss://*.deliveryhero.io wss://ws.hotjar.com https://analytics.tiktok.com https://bat.bing.com https://dmp.tenmax.io/ac https://insight.adsrvr.org/track/realtimeconversion https://infragrid.v.network/wallet/getnodeinfo https://evmos-evm.publicnode.com/ https://overbridgenet.com/jsv8/offer https://api.nimblecapture.com/s/c/ https://micro-assets.foodora.com *.onfido.com wss://*.onfido.com https://client.perimeterx.net https://px.ads.linkedin.com https://bat.bing.net https://google.com analytics-ipv6.tiktokw.us action-log.foodpanda.sg action-log.foodpanda.com.bd action-log.foodpanda.com.kh action-log.foodpanda.hk action-log.foodpanda.la action-log.foodpanda.my action-log.foodpanda.com.mm action-log.foodpanda.pk action-log.foodpanda.ph action-log.foodpanda.com.tw action-log.foodpanda.co.th action-log.foodora.at action-log.foodora.no action-log.foodora.fi action-log.foodora.se action-log.foodora.hu action-log.foodora.cz action-log.yemeksepeti.com action-log.damejidlo.cz action-log-new.netpincer.hu; font-src 'self' data: https://use.fontawesome.com https://fonts.gstatic.com https://cdnjs.cloudflare.com *.themes.googleusercontent.com https://use.typekit.net https://fonts.ub-assets.com https://volo-images.s3.amazonaws.com https://cdn.scite.ai/assets/fonts/ https://micro-assets.foodora.com https://gw.alipayobjects.com/ https://at.alicdn.com; frame-src 'self' *.deliveryhero.io *.adsrvr.org *.doubleclick.net *.facebook.com *.google.com *.googletagmanager.com *.fintech.deliveryhero.com *.googlesyndication.com *.paypal.com *.youtube.com boards.greenhouse.io helpcenter-webclient.usehurrier.com helpcenter-webclient-ap.usehurrier.com helpcenter-webclient-eu.usehurrier.com https://micro-assets.foodora.com sdk.onfido.com https://bat.bing.com *.block.opendns.com *.tradedoubler.com a.tdimage.nl; img-src 'self' data: blob: https: images.dhmedia.io http://image.news.foodpanda.in https://micro-assets.foodora.com; media-src 'self' data: blob: https://at-display-videos.deliveryhero.io https://micro-assets.foodora.com; script-src 'strict-dynamic' 'unsafe-inline' https: 'report-sample' 'unsafe-eval' *.px-cloud.net *.px-cdn.net *.googleapis.com *.tradedoubler.com a.tdimage.nl 'nonce-ke4SnQbyPycOJMxl+JmYAw=='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com https://use.fontawesome.com gstatic.com https://cdnjs.cloudflare.com https://themes.googleusercontent.com https://builder-assets.unbounce.com https://fonts.ub-assets.com https://cdn.jsdelivr.net https://volo-images.s3.amazonaws.com https://micro-assets.foodora.com sdk.onfido.com; worker-src 'self' blob: *.incognia.com *.icg-in.com; report-to csp-endpoint

script-src 'report-sample' 'nonce-qvhyTVZ9pz7jRZppjSnBUA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1

a-bp2vqmofshxl

reCAPTCHA

c-bp2vqmofshxl

recaptcha challenge expires in two minutes

A7vZI3v+Gz7JfuRolKNM4Aff6zaGuT7X0mf3wtoZTnKv6497cVMnhy03KDqX7kBz/q/iidW7srW31oQbBt4VhgoAAACUeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJEaXNhYmxlVGhpcmRQYXJ0eVN0b3JhZ2VQYXJ0aXRpb25pbmczIiwiZXhwaXJ5IjoxNzU3OTgwODAwLCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

viewport

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/


    /* PerimeterX assignments */
    window._pxVid = '';
    window._pxUuid = 'f3d7bee9-cbae-11f0-8d95-ea46eacf0442';
    window._pxAppId = 'PXlJuB4eTB';
    window._pxMobile = false;
    window._pxHostUrl = '/lJuB4eTB/xhr';
    window._pxCustomLogo = '';
    window._pxJsClientSrc = '/lJuB4eTB/init.js';
    window._pxFirstPartyEnabled = true;
    var pxCaptchaSrc = '/lJuB4eTB/captcha/captcha.js?a=c&u=f3d7bee9-cbae-11f0-8d95-ea46eacf0442&v=&m=0';

    var script = document.createElement('script');
    script.src = pxCaptchaSrc;
    script.onerror = function () {
        script = document.createElement('script');
        script.src = 'https://captcha.px-cloud.net/PXlJuB4eTB/captcha.js?a=c&u=f3d7bee9-cbae-11f0-8d95-ea46eacf0442&v=&m=0';
        script.onerror = window._pxOnError;
        document.head.appendChild(script);
    };
    window._pxOnError = function () {
        var style = document.createElement('style');
        style.innerText = '@import url(https://fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap);body{background-color:#fafbfc}.px-captcha-error-container{position:fixed;height:340px;background-color:#fff;font-family:Roboto,sans-serif}.px-captcha-error-header{color:#f0f1f2;font-size:29px;margin:67px 0 33px;font-weight:500;line-height:.83;text-align:center}.px-captcha-error-message{color:#f0f1f2;font-size:18px;margin:0 0 29px;line-height:1.33;text-align:center}.px-captcha-error-button{text-align:center;line-height:48px;width:253px;margin:auto;border-radius:50px;border:solid 1px #f0f1f2;font-size:20px;color:#f0f1f2}.px-captcha-error-wrapper{margin:18px 0 0}div.px-captcha-error{margin:auto;text-align:center;width:400px;height:30px;font-size:12px;background-color:#fcf0f2;color:#ce0e2d}img.px-captcha-error{margin:6px 8px -2px 0}.px-captcha-error-refid{border-top:solid 1px #f0eeee;height:27px;margin:13px 0 0;border-radius:0 0 3px 3px;background-color:#fafbfc;font-size:10px;line-height:2.5;text-align:center;color:#b1b5b8}@media (min-width:620px){.px-captcha-error-container{width:530px;top:50%;left:50%;margin-top:-170px;margin-left:-265px;border-radius:3px;box-shadow:0 2px 9px -1px rgba(0,0,0,.13)}}@media (min-width:481px) and (max-width:620px){.px-captcha-error-container{width:85%;top:50%;left:50%;margin-top:-170px;margin-left:-42.5%;border-radius:3px;box-shadow:0 2px 9px -1px rgba(0,0,0,.13)}}@media (max-width:480px){body{background-color:#fff}.px-captcha-error-header{color:#f0f1f2;font-size:29px;margin:55px 0 33px}.px-captcha-error-container{width:530px;top:50%;left:50%;margin-top:-170px;margin-left:-265px}.px-captcha-error-refid{position:fixed;width:100%;left:0;bottom:0;border-radius:0;font-size:14px;line-height:2}}@media (max-width:390px){div.px-captcha-error{font-size:10px}.px-captcha-error-refid{font-size:11px;line-height:2.5}}';
        document.head.appendChild(style);
        var div = document.createElement('div');
        div.className = 'px-captcha-error-container';
        div.innerHTML = '<div class="px-captcha-error-header">Before we continue...</div><div class="px-captcha-error-message">Press & Hold to confirm you are<br>a human (and not a bot).</div><div class="px-captcha-error-button">Press & Hold</div><div class="px-captcha-error-wrapper"><div class="px-captcha-error"><img class="px-captcha-error" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABMAAAAQCAMAAADDGrRQAAAABGdBTUEAALGPC/xhBQAAAAFzUkdCAK7OHOkAAABFUExURUdwTNYELOEGONQILd0AONwALtwEL+AAL9MFLfkJSNQGLdMJLdQJLdQGLdQKLtYFLNcELdUGLdcBL9gFL88OLdUFLNEOLglBhT4AAAAXdFJOUwC8CqgNIRgRoAS1dWWuR4RTjzgryZpYblfkcAAAAI9JREFUGNNdj+sWhCAIhAdvqGVa1r7/oy6RZ7eaH3D4ZACBIed9wlOOMtUnSrEmZ6cHa9YAIfsbCkWrdpi/c50Bk2CO9mNLdMAu03wJA3HpEnfpxbyOg6ruyx8JJi6KNstnslp1dbPd9GnqmuYq7mmcv1zjnbQw8cV0xzkqo+fX1zkjUOO7wnrInUTxJiruC3vtBNRoQQn2AAAAAElFTkSuQmCC">Please check your internet connection' + (window._pxMobile ? '' : ' or disable your ad-blocker') + '.</div></div><div class="px-captcha-error-refid">Reference ID ' + window._pxUuid + '</div>';
        document.body.appendChild(div);
        if (window._pxMobile) {
            setTimeout(function() {
                location.href = '/px/captcha_close?status=-1';
            }, 5000);
        }
    };
    document.head.appendChild(script);


Google authentication and security services

Requests	IP Address	Location	AS Autonomous System
6	142.250.184.195	United States	AS15169GOOGLE
3	104.16.112.227	United States	AS13335CLOUDFLARENET
3	142.250.184.228	United States	AS15169GOOGLE
3	142.250.184.227	United States	AS15169GOOGLE
1	142.250.185.74	United States	AS15169GOOGLE
1	146.75.121.40	Frankfurt am Main, Hesse, Germany	AS54113FASTLY
1	142.250.186.131	United States	AS15169GOOGLE
1	104.16.191.165	United States	AS13335CLOUDFLARENET
1	34.36.73.246	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
1	34.120.250.63	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
20	16	-	-

Security Scan Report: www.foodora.se

Summary

AI Security Verdict

Details

Bot Protection Detected

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History