lofbergs.se

HTML metadata

Title: Kaffe från Löfbergs | Löfbergs
Description: Löfbergs är ett familjeägt kafferosteri som grundades i Karlstad 1906. I över hundra år har vi jobbat med den goda smaken.
Language: sv-SE
Canonical: https://www.lofbergs.se/

Open Graph

url: https://www.lofbergs.se/
title: Kaffe från Löfbergs
locale: sv_SE
site name: Löfbergs - Sverige
description: Löfbergs är ett familjeägt kafferosteri som grundades i Karlstad 1906. I över hundra år har vi jobbat med den goda smaken.

Technology

Server: nginx
CMS: WordPress
PHP: 8.2.31 security-only
jQuery: 3.7.1

Cookie consent

Cookiebot

Third-party hosts loaded (1)

consent.cookiebot.com×1

Social

Contact

Phone

054140100

DNS records live

NS

ns1.loopia.se
ns2.loopia.se

MX

1 lofbergs-se.mail.protection.outlook.com

TXT

Show 8 TXT records

have-i-been-pwned-verification=1fcdabc693269e36e997b1314652de10
_wtaxivcb439dldyz85vavheb7sz83rg
_1x2q5dyfxzxsaz8763pgj4t6mpcv43p
j5dl74977h16d5rs0rrrk7d8rfb4bnrz
have-i-been-pwned-verification=dweb_eldqpyr4dsn5vdj7ns3jyvfv
bw=Jd0GtTeyd35NBvys88zXAf5R1lg4HbTON3GAipy1LPHP
DZC=xCqpbqK
4A9NSKK1UC4HSMF8HN485QDZ9Y94EH1KPZEVR8DS

Verified for

Apple
Google
Microsoft 365

Email authentication partial

SPF

v=spf1 a ip4:185.21.145.156 ip4:83.140.11.7 ip4:83.140.11.37 ip4:52.209.149.176 ip4:194.18.182.210 ip4:81.91.12.36 ip4:192.121.66.126 include:spf.protection.outlook.com include:spf.mandrillapp.com include:_spf.cention.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:dkim@lofbergs.se; pct=90;

policy: none (monitoring only) · pct=90

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCp6hhkP6dQV8yWoTk3ZEid00LrlbWx8gDMBePe2KuFtpSFV4zaktaen8LcPUUlFQXla3VE8Ffe2uDX3sgYYS…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R13

from 2026-04-20 to 2026-07-19

Expires in 49 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.lofbergs.se/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

weak frame protection
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), gamepad=(), serial=(), accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), gamepad=(), serial=()
x-content-type-options: nosniff, nosniff
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests;
strict-transport-security: max-age=63072000, max-age=63072000
cross-origin-opener-policy: unsafe-none, unsafe-none
cross-origin-embedder-policy: unsafe-none; report-to='default', unsafe-none; report-to='default'
cross-origin-resource-policy: cross-origin, cross-origin