indexo.dev

roloff.com

.com crawl

First seen 2026-05-30 · Last seen 2026-05-31 · ok HTTP/1.1 200 578 ms crawled 2026-05-31

DE · 213.203.219.231 · AS61157 PlusServer GmbH

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Roloff - Shop rund um Arbeitsschutz, Werkzeuge und vieles mehr – Startseite_no_login
Description
Roloff - Shop rund um Arbeitsschutz, Werkzeuge und vieles mehr
Language
de
Canonical
https://www.roloff.com/

Open Graph

url
https://www.roloff.com/
title
Roloff - Shop rund um Arbeitsschutz, Werkzeuge und vieles mehr
site name
Roloff - Shop rund um Arbeitsschutz, Werkzeuge und vieles mehr
description
Roloff - Shop rund um Arbeitsschutz, Werkzeuge und vieles mehr

Technology

Server
Apache
Stack
PHP

Social

Contact

Email
Phone

Registration

Registrar
Key-Systems GmbH
Created
2004-01-22
Expires
2027-01-22 235 days left
Updated
2026-01-23
Name servers
  • ans0.ewetel.de
  • ans1.ewetel.net
  • ans2.ewetel.de
  • ans3.ewetel.net

DNS records live

NS
  • ans0.ewetel.de
  • ans1.ewetel.net
  • ans2.ewetel.de
  • ans3.ewetel.net
MX
  • 10 outlook.roloff.com
Verified for
  • Brevo

Email authentication partial

SPF
v=spf1 a mx include:_spf.ewetel.de include:mailgw.electronicsales.de ~all
softfail (~all)
DMARC
v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com
policy: none (monitoring only)
DKIM
no key found at common selectors

Certificate (current)

Sectigo Public Server Authentication CA DV R36
from 2025-08-22 to 2026-08-23
Expires in 83 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.roloff.com/

present
  • strict-transport-security
  • content-security-policy
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing Permissions Policy
Header values
referrer-policy
origin-when-cross-origin
x-content-type-options
nosniff
content-security-policy
child-src *.1worldsync.com *.also.com *.dailymotion.com *.datpool.net *.electronicsales-mediaserver.de *.googletagmanager.com *.hotjar.com *.instagram.com *.itscope.com *.klarna.com *.paypal.com *.paypalobjects.com *.saferpay.com *.sparkassen-kreditkarten.de *.vimeo.com *.vimeocdn.com *.webtrends.com *.webtrendslive.com *.youtube-nocookie.com *.ytimg.com 3dsecure-cardprocess.de blob: demob2b.commercesolution.de http://files.electronicsales.de maps.google.com masteradmin3.commercesolution.de masteradmin3.es-shops.de media.onlineplus.store oxomi.com ws.cnetcontent.com www.electronicsales.de www.google.com www.sandbox.paypal.com 'self' 'unsafe-inline' *.youtube.com *.skrill.com *.facebook.net *.oxomi.com *.plus6.de mycliplister.com *.carcoustics.com:8443 *.tally.so https://*.tally.so https://tally.so http://*.also.com; connect-src *.etrusted.com *.google-analytics.com *.google.com *.hotjar.com *.hotjar.io *.klarna.com *.minervafinance.de *.pingdom.net *.trustbadge.com cdn.cnetcontent.com
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (5)

Linked from (1)