lamilux.com

HTML metadata

Title

Our Skylights and Composites | LAMILUX

Description

Learn now more about our skylights and composites made in Germany! LAMILUX is a family run business in Rehau.

Language

en

Generator

TYPO3 CMS

Canonical

https://www.lamilux.com/

Translations

en ×2
de

Open Graph

title: Our Skylights and Composites
site name: LAMILUX Heinrich Strunz Holding GmbH & Co. KG
description: Learn now more about our skylights and composites made in Germany! LAMILUX is a family run business in Rehau.

Technology

Server: Apache

Cookie consent

Usercentrics

Third-party hosts loaded (6)

www.lamilux.de×2
js.hs-scripts.com×1
privacy-proxy.usercentrics.eu×1
web.cmp.usercentrics.eu×1
www.google.com×1
www.lamilux.co.uk×1

Social

Registration

Registrar

CPS-Datensysteme GmbH

Created

2000-07-05

Expires

2026-07-05 45 days left

Updated

2025-06-20

Name servers

f2.de.ha-dns.net
ka2.de.ha-dns.net
lxa.us.ha-dns.net
m.de.ha-dns.net

DNS records live

NS

f2.de.ha-dns.net
ka2.de.ha-dns.net
lxa.us.ha-dns.net
m.de.ha-dns.net

Email authentication strong

SPF

v=spf1 a mx include:spf.protection.outlook.com a:mail.lamilux.de include:7458436.spf05.hubspotemail.net ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:info@lamilux.de;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcs8dlQ8LSZIq/KlG0700+pkfdeV4XvwgkEECAljVZ9cK/NO1k/7/bZKzUOAEfeT0DIM3WMa7CWk78…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qJkER1DxQmc6KJRl1AGbtR59B2AvFaAONKs5jQArblv9gmdJsAsRfgUXE1EOFGTXxitqDpHJPYSeW…
smtpapi: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76…

selectors probed

Certificate (current)

R13

from 2026-05-16 to 2026-08-14

Expires in 85 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.lamilux.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), midi=(), camera=(), usb=(), magnetometer=(), accelerometer=(), vr=(), speaker=(), ambient-light-sensor=(), gyroscope=(), microphone=()
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.hsadspixel.net/fb.js https://surveys-static.survicate.com https://survey.survicate.com https://js.hubspot.com https://js.hubspotfeedback.com player.vimeo.com https://*.usercentrics.eu https://*.survicate.com https://api.hubspot.com https://f.vimeocdn.com https://vimeo.com https://privacy-proxy.usercentrics.eu https://www.vimeo.com https://api.usercentrics.eu https://www.gstatic.com https://app.usercentrics.eu https://forms.hubspot.com https://googleads.g.doubleclick.net https://graphql.usercentrics.eu https://i.ytimg.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hsleadflows.net https://js.usemessages.com https://p.typekit.net https://track.hubspot.com https://use.typekit.net https://www.google-analytics.com https://www.google.com https://www.google.de https://www.googletagmanager.com https://r1---sn-4g5e6nz7.googlevideo.com https://www.youtube.com https://www.youtube-nocookie.com
strict-transport-security: max-age=31536000