dlf.com

HTML metadata

Title: DLF
Description: DLF is a global seed company headquartered in Roskilde, Denmark. The company provides quality products to more than 80 countries worldwide.
Language: en
Canonical: /

Technology

CMS: Joomla

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Fonts

Google Fonts

Third-party hosts loaded (4)

www.googletagmanager.com×2
consent.cookiebot.com×1
fonts.gstatic.com×1
static.klaviyo.com×1

Social

Registration

Registrar

EuroDNS S.A.

Created

1998-09-25

Expires

2026-09-24 127 days left

Updated

2025-09-18

Name servers

ns1.eurodns.com
ns2.eurodns.com
ns3.eurodns.com
ns4.eurodns.com

DNS records live

NS

ns1.eurodns.com
ns2.eurodns.com
ns3.eurodns.com
ns4.eurodns.com

MX

10 dlf-com.mail.protection.outlook.com

TXT

Show 8 TXT records

apple-domain-verification=a6bFKibamfbFr3pS
google-site-verification=UVZF_ngqGwzA2pG7BypvVES_8Itf9OZ0hf5PGtWh1oE
klaviyo-site-verification=Sy4mEW
google-site-verification=AZwa01y-oE1UNMTfwnhDmIy81PSka_EEH-mnrT7mEDA
7YM-V5K-RBN
MS=ms39529622
BPL=9223195
atlassian-domain-verification=mqOEEZZamdwdsnTSS5ilP1bCp0OnQilHOgBnEBpFa5jlD7Hb7BPRK/0gR4HpSid/

Email authentication strong

SPF

v=spf1 include:amazonses.com include:spf.protection.outlook.com ip4:20.76.225.129 ip4:13.78.148.241 include:sendgrid.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCOs691PLJ4qot5AtO8LV2JPdBMvglnG2wcvv4GrRuWc5xRm1YpAQ7eARfWBIjkE99MGmQxJHufTV54cBSr0X…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyoHkXulLzriuP8paURoDyMi/VEGQ1309/1+2F6V7snPQyEGMzkN/M0+kwha3+VevvjNoNYuIBM3Kk8mVp…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCvGcbYtmDirtzQzZQwBy4Wwzcbk6lQA+wmuqP2ZaCOpmQ5DdgS5q97u4JGmOYm1e8F/21tuwR8wF45MnM3X7tDQs…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-04-11 to 2026-10-27

Expires in 160 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://dlf.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: style-src 'self' 'unsafe-inline' fonts.bunny.net fonts.googleapis.com static-tracking.klaviyo.com static.klaviyo.com stcdn.leadconnectorhq.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' universe-static.elfsightcdn.com elfsightcdn.com/platform.js scripts.clarity.ms www.clarity.ms clarity.ms d70shl7vidtft.cloudfront.net script.hotjar.com static.hotjar.com www.google-analytics.com ct.leady.com c.seznam.cz consent.cookiebot.eu www.youtube.com www.google.com services.leadconnectorhq.com stcdn.leadconnectorhq.com googleads.g.doubleclick.net link.msgsndr.com widgets.leadconnectorhq.com www.googletagmanager.com policy.app.cookieinformation.com policy.cookieinformation.com consent.cookiebot.com consentcdn.cookiebot.com embeds.ipaper.io snap.licdn.com connect.facebook.net code.jquery.com ajax.googleapis.com maps.googleapis.com maxcdn.bootstrapcdn.com code.highcharts.com code.highcharttable.org cdnjs.cloudflare.com www.gstatic.com static.klaviyo.com static-tracking.klaviyo.com fonts.googlea
strict-transport-security: max-age=2592000