wmf-coffeemachines.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 4791 ms crawled 2026-05-19

FR · 81.92.94.54 · AS20756 Nameshield SAS

Reputation 100/100

Classifying

HTML metadata

Title

WMF Professional Coffee Machines

Description

WMF offers a full range of coffee machines for your business ✔ Fully automatic coffee machines ✔ Espresso machines ✔ Filter coffee machines | Designed to perform. Learn more!

Language

Canonical

https://www.wmf-coffeemachines.com/en_com/

Translations

de ×3
en ×3
fr ×3
nl ×2
es
ja
pl
zh

Open Graph

url: https://www.wmf-coffeemachines.com/en_com/
title: WMF Professional Coffee Machines
description: WMF offers a full range of coffee machines for your business ✔ Fully automatic coffee machines ✔ Espresso machines ✔ Filter coffee machines | Designed to perform. Learn more!

Technology

CDN: Cloudflare
CMS: Nuxt

Social

Registration

Registrar

Nameshield SAS

Created

2011-08-18

Expires

2026-08-18 89 days left

Updated

2025-08-18

Name servers

nsa.perf1.fr
nsb.perf1.com
nsc.perf1.com

DNS records live

NS

nsa.perf1.fr
nsb.perf1.com
nsc.perf1.com

MX

10 mail10.wmf.de
20 mail20.wmf.de

TXT

D-TRUST=LE99J4NWKKUY8RT
D-TRUST=4GDCHJVJV8GPD7PKRZELF6I

Verified for

Google
Meta

Email authentication strong

SPF: v=spf1 mx ip4:217.23.55.200/28 ip4:213.214.19.24/29 ip4:194.156.246.0/24 ip4:61.155.195.78 ip4:62.209.53.67 -all
strict (-all)
DMARC: v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

Encryption Everywhere DV TLS CA - G2

from 2025-09-05 to 2026-09-05

Expires in 107 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.wmf-coffeemachines.com/en_com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: no-referrer
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), display-capture=(), fullscreen=(self), geolocation=(self), microphone=()
x-content-type-options: nosniff
content-security-policy: base-uri 'none'; font-src 'self' data: https://fonts.gstatic.com; form-action 'self'; frame-ancestors 'self' https://app.storyblok.com; img-src 'self' data: blob: https:; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'strict-dynamic' 'nonce-afSYuo03jlvGMzeldryxfNGv' 'unsafe-eval'; upgrade-insecure-requests; frame-src 'self' https://challenges.cloudflare.com https://www.chatbase.co/ https://www.youtube-nocookie.com/;
strict-transport-security: max-age=63072000; includeSubDomains; preload
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-origin