halfen.com

.com crawl

First seen 2026-04-20 · Last seen 2026-05-17 · ok HTTP/1.1 200 4389 ms crawled 2026-05-14

DE · 151.106.71.89 · AS61157 PlusServer GmbH

Reputation 100/100

sector tech type homepage

HTML metadata

Title: Leviat- Fixing technology for the construction industry.
Description: Today Leviat counts as one of the worldwide leading companies in fixing technology for the construction industry.
Language: en_DE

Technology

Server: nginx

Social

Registration

Registrar

Combell NV

Created

1996-12-17

Expires

2027-12-16 576 days left

Updated

2026-03-22

Name servers

ns1.combell.eu
ns3.combell.net
ns4.combell.net

DNS records live

NS

ns1.combell.eu
ns3.combell.net
ns4.combell.net

MX

5 mxa-00344903.gslb.pphosted.com
5 mxb-00344903.gslb.pphosted.com

Email authentication strong

SPF

v=spf1 include:_spf.crh.com include:smtp.biz.net.id ip4:151.106.71.83 ip4:151.106.71.93 ip4:173.249.16.4 ip4:151.106.71.85 -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: reject (enforced)

DKIM

selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf57pxFYNOfqF2ixLCLBs+mgYyHjFu15Dm7wqzIRoMKeM53hqpM0kiP7qJ2l+/ml3ypomBbV3FgFeb…

selectors probed

Certificate (current)

R13

from 2026-04-02 to 2026-07-01

Expires in 43 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.halfen.com/en-DE

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: autoplay=(), camera=(), geolocation=(), microphone=(), midi=()
x-content-type-options: nosniff
content-security-policy: default-src https: https://www.halfen.com; script-src 'unsafe-inline' 'unsafe-eval' https: https://www.halfen.com; style-src 'unsafe-inline' https:; img-src https: data:; font-src https: data:
strict-transport-security: max-age=15768000