goldhofer.com

HTML metadata

Title

Home | Goldhofer AG

Language

de-DE

Canonical

https://www.goldhofer.com/

Translations

de
en

Open Graph

url: https://www.goldhofer.com/
title: Home
locale: de_DE
site name: Goldhofer AG

Technology

Server: Apache

Third-party hosts loaded (2)

5f3c395.ccm19.de×1
static.etracker.com×1

Social

Contact

Email

Phone

Registration

Registrar

InterNetX GmbH

Created

1997-08-05

Expires

2026-08-04 75 days left

Updated

2025-08-05

Name servers

dns.datafarm.de
hans.continum.net

DNS records live

NS

dns.datafarm.de
hans.continum.net

MX

20 mx1.hc2511-76.eu.iphmx.com
20 mx2.hc2511-76.eu.iphmx.com

TXT

Show 4 TXT records

mindmanager-verification=1903f120adc6a5a827f507bd785dd06af67c31c3d40075738e5c62e97451e34e
bw=KcuFSuknwjy91AL0rcRoaTy9ud94QeuMcWU2WkZc5fY6
duo_sso_verification=jCWNQCdywdHcTjYUDsBnLXf42MyFEevmEZfscK5hf4OYslmSqIFh3qFl5tJP7J3N
ZSLn66XR6Q7Mqmqi3Gzh5YOKUM+u6EDSy++2ISU0wSMYoStB7tx4GsGh40lGNgASH307DVgYhZ8GXEKJnzx/Hg==

Verified for

Apple
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 a mx ip4:80.72.131.24/29 a:out.goldhofer.de ip4:62.204.174.131 ip4:62.55.182.68 include:spf.crsend.com include:_spf.cmail.ondemand.com include:amazonses.com exists:%{i}.spf.hc2511-76.eu.iphmx.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine

policy: quarantine

DKIM

s1: v=DKIM1; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTfKyySJ6cM016VZtC0WnuRHtC+McWeoD8AgSpztjBoGXKGK9jR3vVtiPd2ZL177IpK3DStRLmzD3oTfV7NVh…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2025-06-30 to 2026-06-30

Expires in 40 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.goldhofer.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), geolocation=(self), microphone=(), payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'none'; script-src 'self' https://5f3c395.ccm19.de https://cloud.ccm19.de https://static.etracker.com https://code.etracker.com https://www.etracker.de 'unsafe-inline' 'unsafe-eval' data: blob:; script-src-elem 'self' https://5f3c395.ccm19.de https://cloud.ccm19.de https://static.etracker.com https://code.etracker.com https://www.etracker.de 'unsafe-inline' data: blob:; style-src 'self' https://5f3c395.ccm19.de https://cloud.ccm19.de 'unsafe-inline' data: 'unsafe-inline'; style-src-elem 'self' https://5f3c395.ccm19.de https://cloud.ccm19.de 'unsafe-inline' data: 'unsafe-inline'; img-src 'self' data: https://5f3c395.ccm19.de https://*.ccm19.de https://static.etracker.com https://code.etracker.com https://www.etracker.de; font-src 'self'; connect-src 'self' https://5f3c395.ccm19.de https://*.ccm19.de https://static.etracker.com https://co
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin