luxorstore.com

HTML metadata

Title

Shop Luxor Hotel Beds & Bedding, Bath & Spa, Scents & Gifts

Description

Shop the Luxor Hotel collection of premium beds, bedding, linens, bath & spa essentials, fragrances and gift items. Enjoy the bold style and signature comfort.

Language

en

Canonical

https://www.luxorstore.com/

Translations

en ×2

Open Graph

url: https://www.luxorstore.com/index.aspx
title: Shop Luxor Hotel Beds & Bedding, Bath & Spa, Scents & Gifts
site name: Luxor Store
description: Shop the Luxor Hotel collection of premium beds, bedding, linens, bath & spa essentials, fragrances and gift items. Enjoy the bold style and signature comfort.

Technology

CDN: Amazon CloudFront

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (3)

ajax.googleapis.com×1
use.typekit.net×1
www.googletagmanager.com×1

Contact

Phone

1-877-727-0960

Registration

Registrar

Nom-iq Ltd. dba COM LAUDE

Created

2018-10-05

Expires

2026-10-05 137 days left

Updated

2026-02-23

Name servers

ns20.digicertdns.com
ns21.digicertdns.com
ns22.digicertdns.com
ns23.digicertdns.net
ns24.digicertdns.net
ns25.digicertdns.net

DNS records live

NS

ns20.digicertdns.com
ns21.digicertdns.com
ns22.digicertdns.com
ns23.digicertdns.net
ns24.digicertdns.net
ns25.digicertdns.net

MX

1 mx1-us1.ppe-hosted.com
5 mx2-us1.ppe-hosted.com

TXT

Show 4 TXT records

ppe-d00ff2eb895054e0ff4669d4dabaefa7167c362a
7n02qswm0sl9l91mb083d1wh32hnz3s0
_eitan76nwm4rxnj9k13bksvzbqhorwl
b7gxftj4y6llkdwntn9s57rdttrz5rmh

Verified for

Google
Microsoft 365

Email authentication strong

SPF

v=spf1 a:dispatch-us.ppe-hosted.com include:_spf.smtp.com include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; sp=none; pct=100; aspf=r;

policy: reject (enforced) · sp=none

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYblQ2NLHkiuNzk4bc9lbdvoZyctWk6ViaXHYsYXOXo29sQKxWVeH3IcxQZEvbCnBPSKPX78zRUiaA…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-01-02 to 2027-02-02

Expires in 257 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.luxorstore.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'nonce-Z9hOCPm3FYJsfvM0od1lZA==' https://www.googletagmanager.com https://514022879.collect.igodigital.com https://ajax.googleapis.com https://www.google.com https://maps.googleapis.com https://static-na.payments-amazon.com https://client.rum.us-east-1.amazonaws.com; style-src 'self' 'unsafe-inline' ; font-src 'self' https://use.typekit.net https://fonts.gstatic.com; img-src 'self' https://nova.collect.igodigital.com https://m.media-amazon.com https://p.typekit.net https://www.googletagmanager.com https://cdn-assets.affirm.com; object-src 'none'; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://td.doubleclick.net;
strict-transport-security: max-age=31536000; includeSubDomains; preload