luilak.co.uk

HTML metadata

Title

Luilak Hammocks | Premium & Sustainable Organic Cotton

Description

Discover Luilak's luxurious hammocks. Made from 100% organic cotton for ultimate comfort. For every hammock sold, we plant a tree. Order your moment of tranquility now!

Language

en

Canonical

https://www.luilak.co.uk/

Translations

de ×3
en ×3
fr ×2
nl ×2
cs
da
es
fi
it
pl
pt
sv

Technology

CDN: Cloudflare
CMS: Gatsby

Third-party hosts loaded (17)

www.luilak.be×2
www.luilak.eu×2
ga.luilak.eu×1
www.luilak.at×1
www.luilak.ch×1
www.luilak.cz×1
www.luilak.de×1
www.luilak.dk×1
www.luilak.es×1
www.luilak.fi×1
www.luilak.fr×1
www.luilak.ie×1
www.luilak.it×1
www.luilak.nl×1
www.luilak.pl×1
www.luilak.pt×1
www.luilak.se×1

DNS records live

NS

clint.ns.cloudflare.com
raegan.ns.cloudflare.com

MX

27 route3.mx.cloudflare.net
80 route2.mx.cloudflare.net
88 route1.mx.cloudflare.net

Verified for

Google

Email authentication partial

SPF: v=spf1 include:spf.vendic.nl include:_spf.google.com include:mailgun.org include:_spf.mx.cloudflare.net ~all
softfail (~all)
DMARC: v=DMARC1; p=none; rua=mailto:09b8ccbf87194b2a9b2624a81f44cbd8@dmarc-reports.cloudflare.net
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-04-05 to 2026-07-04

Expires in 34 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.luilak.co.uk/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options

findings

missing Content Security Policy
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubdomains; preload
content-security-policy-report-only: font-src www.paypalobjects.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ js.mollie.com *.sendcloud.sc *.jsdelivr.net *.belco.io https://www.googletagmanager.com https://td.doubleclick.net 'self' 'unsafe-