luilak.fi

HTML metadata

Title

Luilak-riippumatot | Laadukas ja kestävä orgaaninen puuvilla

Description

Tutustu Luilakin ylellisiin riippumattoihin. Valmistettu 100 % orgaanisesta puuvillasta äärimmäistä mukavuutta varten. Jokaista myytyä riippumattoa kohden istutamme puun. Tilaa oma rauhallinen hetki nyt!

Language

fi

Canonical

https://www.luilak.fi/

Translations

de ×3
en ×3
fr ×2
nl ×2
cs
da
es
fi
it
pl
pt
sv

Technology

CDN: Cloudflare
CMS: Gatsby

Third-party hosts loaded (17)

www.luilak.be×2
www.luilak.eu×2
ga.luilak.eu×1
www.luilak.at×1
www.luilak.ch×1
www.luilak.co.uk×1
www.luilak.cz×1
www.luilak.de×1
www.luilak.dk×1
www.luilak.es×1
www.luilak.fr×1
www.luilak.ie×1
www.luilak.it×1
www.luilak.nl×1
www.luilak.pl×1
www.luilak.pt×1
www.luilak.se×1

DNS records live

NS

luciane.ns.cloudflare.com
melnicoff.ns.cloudflare.com

MX

26 route3.mx.cloudflare.net
4 route1.mx.cloudflare.net
55 route2.mx.cloudflare.net

Verified for

Google

Email authentication partial

SPF: v=spf1 include:spf.vendic.nl include:_spf.google.com include:mailgun.org include:_spf.mx.cloudflare.net ~all
softfail (~all)
DMARC: v=DMARC1; p=none; rua=mailto:305255c5edc74d5685831c8d1bf22220@dmarc-reports.cloudflare.net
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-04-26 to 2026-07-25

Expires in 54 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.luilak.fi/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options

findings

missing Content Security Policy
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubdomains; preload
content-security-policy-report-only: font-src www.paypalobjects.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ js.mollie.com *.sendcloud.sc *.jsdelivr.net *.belco.io https://www.googletagmanager.com https://td.doubleclick.net 'self' 'unsafe-