limbachgruppe.com

.com crawl dns

First seen 2026-05-02 · Last seen 2026-05-09 · ok HTTP/1.1 200 1325 ms crawled 2026-05-09

DE · 157.97.108.86 · AS8560 IONOS SE

Reputation 100/100

sector health type homepage

HTML metadata

Title: Mehr als Labor · Limbach Gruppe
Description: Die Limbach Gruppe steht für partnerschaftliche Zusammenarbeit und hochwertige Labormedizin.
Language: de-DE
Generator: TYPO3 CMS
Canonical: https://www.limbachgruppe.com/

Open Graph

url: https://www.limbachgruppe.com/
title: Mehr als Labor
image:url: https://www.limbachgruppe.com/fileadmin/_processed_/c/1/csm_lgse_default_some_thumb_e9246ca4c6.webp
description: Die Limbach Gruppe steht für partnerschaftliche Zusammenarbeit und hochwertige Labormedizin.

Technology

Server: nginx

Social

Contact

Phone

+49 6221 1853 0

Address

Im Breitspiel 15, 69126, Heidelberg, Deutschland

Registration

Registrar

COREhub, S.R.L.

Created

2010-11-25

Expires

2026-11-25 189 days left

Updated

2025-11-25

Name servers

ns01.versatel.de
ns02.versatel.de
ns03.versatel.de

DNS records live

NS

ns01.versatel.de
ns02.versatel.de
ns03.versatel.de

MX

10 mail.limbachgruppe.com

TXT

atlassian-domain-verification=WEfLqsBC05fj2ldkvKac3NOLlTZ5K55kJHsGWw3sR/NIIYduI0CYcaLwC45UkMCd
google-site-verification=0T6oRieUoYSx58nNu0uv2hIFWk3GJ-BaSJs3IrGdrOw
MS=ms23920251

Email authentication strong

SPF: v=spf1 mx a:mail.limbachgruppe.com a:pmail01-de.de.umantis.com a:pmail02-de.de.umantis.com ip4:213.95.13.132/32 ip4:213.95.13.133/32 ip4:62.96.48.41/32 include:spf.de.umantis.com include:_spf.jpberlin.de -all
strict (-all)
DMARC: v=DMARC1; p=reject; sp=reject
policy: reject (enforced) · sp=reject
DKIM: no key found at common selectors

Certificate (current)

GlobalSign RSA OV SSL CA 2018

from 2025-12-01 to 2027-01-02

Expires in 228 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.limbachgruppe.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self "https://www.limbachgruppe.com"), microphone=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' dajqy3jd7lpkq.cloudfront.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' connect.facebook.net limbachgroup.activehosted.com *.etracker.com *.etracker.de *.app-us1.com trackcmp.net www.google.com www.gstatic.com https://*.limbachgruppe.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com www.facebook.com connect.facebook.net *.etracker.com *.etracker.de www.gstatic.com https://www.limbachgruppe.com limbach.canto.de *.cloudfront.net; base-uri 'self'; frame-src 'self' *.vimeo.com *.youtube.com *.youtube-nocookie.com www.google.com lv.limbachgruppe.com lv.limbachgruppe-test.com https://*.limbachgruppe.com; form-action 'self'; style-src 'self' 'unsafe-inline' *.etracker.com etracker.limbachgruppe.com 'report-sample'; font-src 'self' data:; object-src 'self'; worker-src 'self' blob: 'report-sample'; connect-src 'self' data: *.openstreetmap.org api.geoapify.com www.facebook.com etracker.limbachgruppe.com *
strict-transport-security: max-age=31536000; includeSubDomains; preload