leolux.com

.com crawl

First seen 2026-05-19 · Last seen 2026-05-30 · ok HTTP/1.1 200 3441 ms crawled 2026-05-30

US · 76.76.21.21 · AS16509 Amazon.com, Inc.

Reputation 86/100 spf without fallback dmarc monitor-only

Classifying

HTML metadata

Title: Official website of Leolux - Welcome to you - Leolux
Description: Experience the versatility and high-quality design of Leolux furniture. View our complete collection online or find a dealer near you.
Language: en-GB

Open Graph

title: Leolux

Technology

CDN: Vercel
CMS: Next.js
JS framework: Next.js

Third-party hosts loaded (3)

a.storyblok.com×16
app.storyblok.com×1
plugins.flockler.com×1

Social

Registration

Registrar

Hosting Concepts B.V. d/b/a Registrar.eu

Created

1999-02-07

Expires

2027-02-07 251 days left

Updated

2026-02-07

Name servers

ns.systemec.nl
ns2.systemec.nl
ns3.systemec.nl
ns4.systemec.nl

DNS records live

NS

ns.systemec.nl
ns2.systemec.nl
ns3.systemec.nl
ns4.systemec.nl

MX

10 mx-01-eu-central-1.prod.hydra.sophos.com
20 mx-02-eu-central-1.prod.hydra.sophos.com

TXT

trustpilot-one-time-verification-id=92f292f8-8b04-4242-ac66-b9daa07839b7
sophos-domain-verification=1b3e0282e59133f86f7b043a412a8853fb0dee10

Verified for

Google
Meta
Microsoft 365

Email authentication weak

SPF

v=spf1 redirect=leolux.com.spf.sophosdmarc.net

missing all

DMARC

v=DMARC1; p=none; pct=100; rua=mailto:a.24b8bb6c@reports.sophosdmarc.net

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X2udHsPIHoEFspcw414WIiflSLsPh5Olv2OPKZihtiC6txbmUHQ7VlVfqhRcCT4oV+AkFN5CjuhFS…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R13

from 2026-05-12 to 2026-08-10

Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.leolux.com/

present

strict-transport-security
content-security-policy
x-content-type-options
permissions-policy

findings

CSP uses wildcard sources
missing frame protection
missing Referrer Policy

Header values

permissions-policy: camera=(), microphone=(), geolocation=(self)
x-content-type-options: nosniff
content-security-policy: child-src blob: http://e.issuu.com https://intercom-sheets.com https://kuula.co https://www.intercom-reporting.com; connect-src 'self' wss://nexus-websocket-a.intercom.io wss://nexus-europe-websocket.intercom.io *.pinterest.com *.intercom.io *.google-analytics.com *.ingest.sentry.io https://*.analytics.google.com https://*.doubleclick.net https://*.flockler.app https://api-iam.eu.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://api.eu.intercom.io https://api.intercom.io https://api.mapbox.com https://consentcdn.cookiebot.com https://events.mapbox.com/ https://leolux-graphql-acc.vercel.app https://leolux-graphql.vercel.app https://nexus-europe-websocket.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://uploads.eu.intercomcdn.com https://uploads.intercomcdn.com https://uploads.intercomcdn.eu https://via.intercom.io wss://nexus-europe-websocket.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.
strict-transport-security: max-age=63072000; includeSubDomains; preload