erfa-foodservice.de

.de crawl

First seen 2026-04-24 · Last seen 2026-05-18 · ok HTTP/1.1 200 19620 ms crawled 2026-05-18

US · 198.49.23.145 · AS53831 Squarespace, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Netzwerk & Erfahrung
Language: en-US

Open Graph

url: https://www.erfa-foodservice.de/
title: Netzwerk & Erfahrung
description: Die Erfas...

Technology

Server: ESF

Fonts

Google Fonts

Third-party hosts loaded (4)

lh3.googleusercontent.com×31
fonts.googleapis.com×2
www.gstatic.com×2
apis.google.com×1

Social

Contact

Email

Phone

+49172 9101655

Registration

Updated

2026-01-15

Name servers

ns-cloud-a1.googledomains.com.
ns-cloud-a2.googledomains.com.
ns-cloud-a3.googledomains.com.
ns-cloud-a4.googledomains.com.

DNS records live

NS

ns-cloud-a1.googledomains.com
ns-cloud-a2.googledomains.com
ns-cloud-a3.googledomains.com
ns-cloud-a4.googledomains.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Verified for

Google

Email authentication weak

SPF

v=spf1 include:_spf.google.com include:amazonses.com ~all

softfail (~all)

DMARC

not published

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof+DvTy6ivob98lCa+ZFuHcPLUzcq0peE6lTLZ54ld0R7o7TsDtpO9mZCEcJ83EvKBU/JXsK8aGk/x…

selectors probed

Certificate (current)

R12

from 2026-03-26 to 2026-06-24

Expires in 34 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.erfa-foodservice.de

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-40wolnCAkTR1rDRCruNKNA' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://google-admin.corp.google.com/
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: same-site