indexo.dev

luhta.com

.com crawl

First seen 2026-04-16 · Last seen 2026-05-17 · ok HTTP/1.1 200 1865 ms crawled 2026-05-11

US · 130.211.46.166 · AS396982 Google LLC

Reputation 100/100

Classifying

HTML metadata

Title
Kotimainen ulkoilun, muodin ja kodin verkkokauppa | Luhta.com
Description
Vaatteet, kengät ja asusteet suosikkibrändeiltä edullisesti Luhta.com-verkkokaupasta | Ilmainen toimitus yli 50 € tilauksiin | Ilmainen palautus
Language
fi-FI
Canonical
https://luhta.com/fi/fi
Translations
  • b2b
  • bg
  • bg-bg
  • cs
  • cs-cz
  • da
  • da-dk
  • de
  • de-at
  • de-be
  • de-de
  • de-lu
  • el
  • el-gr
  • en
  • en-gb
  • en-ie
  • en-us
  • es
  • es-es
  • et
  • et-ee
  • fi
  • fi-fi
  • fr
  • fr-fr
  • hr
  • hr-hr
  • hu
  • hu-hu
  • it
  • it-it
  • ja
  • ja-jp
  • lt
  • lt-lt
  • lv
  • lv-lv
  • nl
  • nl-nl
  • pl
  • pl-pl
  • pt
  • pt-pt
  • ro
  • ro-ro
  • sk
  • sk-sk
  • sl
  • sl-si
  • sv
  • sv-se

Open Graph

url
https://luhta.com/fi/fi
title
Kotimainen ulkoilun, muodin ja kodin verkkokauppa
locale
fi_FI
site name
Luhta.com-verkkokauppa
description
Vaatteet, kengät ja asusteet suosikkibrändeiltä edullisesti Luhta.com-verkkokaupasta | Ilmainen toimitus yli 50 € tilauksiin | Ilmainen palautus
locale:alternate
sv_SE

Technology

Server
Google
Analytics
  • Google Tag Manager
Cookie consent
  • Cookiebot

Third-party hosts loaded (4)

  • images.ctfassets.net×7
  • consent.cookiebot.com×1
  • js.klarna.com×1
  • www.googletagmanager.com×1

Contact

Address
Tiilimäenkatu 9, FI-15680, Lahti, Finland

Registration

Registrar
Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA
Created
1999-04-15
Expires
2027-04-15 330 days left
Updated
2026-04-16
Name servers
  • ns-fi.elisa.net
  • ns-se.elisa.net

DNS records live

NS
  • ns-fi.elisa.net
  • ns-se.elisa.net
MX
  • 0 luhta-com.mail.protection.outlook.com
TXT
Show 9 TXT records
  • trend-micro-v1-domain-verification.71803d6f8d390acdabcd8efecf4bee41=81570193-4109-472e-8667-5067f31a268d
  • infor-cloudsuite-domain-verification=JYQG4VSPJXS89947P9RPW4K38TCDPXWAS7LR399HKPR7ZVHWJX38JPGM9GBNWSQH
  • _globalsign-domain-verification=91buzdyZKXX0M-XJUqqLtOn4D5qwNzCX4l4BsMah4y
  • 093I5UQKN08X29QY7AE6UQ9W88B33VIMC451K2CX
  • MS=ms42083706
  • MS=C01B773866E286F2974021A3A3D6C8B1285048B4
  • facebook-domain-verification=bkzrivfpjbc96lxs78eya3hlf09686
  • google-site-verification=SeAMRllVvwh4aZJnkIYksVDO9jr0TcCJoHbjfkXzPAI
  • google-site-verification=pdRsS8ItFlz_N4QLgXyYx2gkHIABzEkinSC7_UjVoHw

Email authentication strong

SPF
v=spf1 ip4:213.139.179.3 ip4:213.139.179.4 ip4:185.26.49.169 ip4:193.185.142.21 ip4:195.30.138.193 ip6:2001:608:c00:a0::193/128 ip4:168.245.17.25 include:spf.protection.outlook.com include:email.luhta.fi include:itsmaileu.luhta.fi include:mail.webropolsurveys.com include:_spf.vaimo.net include:mail.zendesk.com include:amazonses.com include:u17645881.wl132.sendgrid.net -all
strict (-all)
DMARC
v=DMARC1; p=reject; rua=mailto:dmarc@ict.luhta.fi
policy: reject (enforced)
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0/EAkqWhRBSllfIQdCuB4C2yfI/h/++A6/XFFeLC99IIYMgdkO7sFXyG14EL5E/qrKr0tB19UppYY…
  • s1: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDh9453mJiK+tIslcIQjkohuGj2swke/4lavr79kBlNliRz5lPOPPklgUiTozzQnp3h/uPi5UmjcLGHjpSjN7T9SI…
  • s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7fRdbz1QVt6PdgtYERTTdvMbudFRfa99LoP1g4pI0MSpALcVqXjkXNt+WXuWan7lO1Q8hY9Ori+dY73NdlBXj3v…
selectors probed

Certificate (current)

WR3
from 2026-04-29 to 2026-07-28
Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://luhta.com/fi/fi

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-embedder-policy
  • cross-origin-resource-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
no-referrer
x-frame-options
SAMEORIGIN
permissions-policy
camera=(), display-capture=(), fullscreen=(self "https://player.vimeo.com"), geolocation=(self), microphone=()
x-content-type-options
nosniff
content-security-policy
base-uri 'none'; font-src 'self' https: data:; form-action 'self' https://*.facebook.com/ https://*.luhta.com/; frame-ancestors 'self' https://app.contentful.com; img-src 'self' data: blob: https://*.hotjar.com https://*.stripe.com/ https://*.stripe.com/ https://*.kustom.co/ https://*.fibbl.com/ https://*.ctfassets.net https://imgsct.cookiebot.com/ https://www.facebook.com/ https://connect.facebook.net/ https://*.doubleclick.net/ https://i.vimeocdn.com/ https://maps.gstatic.com/ https://maps.googleapis.com/ https://developers.google.com/ https://www.googleadservices.com/ https://*.googletagmanager.com/ https://*.google-analytics.com/ https://*.ggpht.com/ https://*.google.fi/ https://*.google.com/ https://*.googlesyndication.com/ https://*.pinimg.com/ https://api.luhta.com https://*.api.luhta.com https://*.luhta.com/; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://*.klarnacdn.net/; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://luhta.c
strict-transport-security
max-age=15552000; includeSubDomains
cross-origin-opener-policy
same-origin-allow-popups
cross-origin-embedder-policy
unsafe-none
cross-origin-resource-policy
same-origin

Links to (1)

Linked from (6)