valostore.com

HTML metadata

Title: #1 The Lighting Store - Valostore Europe - VALOSTORE.COM
Description: #1 The Lighting Store - Valostore Europe
Language: en
Canonical: https://www.valostore.com/en

Open Graph

url: https://www.valostore.com/en
title: #1 The Lighting Store - Valostore Europe - VALOSTORE.COM
description: #1 The Lighting Store - Valostore Europe

Technology

CMS: Next.js
JS framework: Next.js

Ads

Criteo

Fonts

Google Fonts

Third-party hosts loaded (4)

cdn.handshake.fi×20
app.talkie.se×1
dynamic.criteo.com×1
fonts.googleapis.com×1

Registration

Registrar

eNom, LLC

Created

2013-05-13

Expires

2028-05-13 710 days left

Updated

2026-04-21

Name servers

ns-cloud-c1.googledomains.com
ns-cloud-c2.googledomains.com
ns-cloud-c3.googledomains.com
ns-cloud-c4.googledomains.com

DNS records live

NS

ns-cloud-c1.googledomains.com
ns-cloud-c2.googledomains.com
ns-cloud-c3.googledomains.com
ns-cloud-c4.googledomains.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Verified for

Google

Email authentication strong

SPF

v=spf1 a mx include:_spf.google.com include:eu.mailgun.org include:handshakemarketing.fi ~all

softfail (~all)

DMARC

v=DMARC1;p=reject;pct=100;ruf=mailto:dmarc@valostore.com;sp=reject;aspf=r;adkim=r;

policy: reject (enforced) · sp=reject

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCha0g+PKuBFV9HvAErvmRx7QuNn2NogLtchTMSqqHZ/hrVodAi3dC0/dbFxd9Egkf2WZTDtV4Y7zBEp7SE4L…

selectors probed

Certificate (current)

WR3

from 2026-04-20 to 2026-07-19

Expires in 47 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.valostore.com/en

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: default-src 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.facebook.net www.facebook.com www.google-analytics.com www.youtube.com *.paytrail.com ajax.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.goodleadservices.com *.handshake.fi *.tiktok.com *.stripe.com *.getresponse360.pl *.getresponse.com *.gr-cdn.com *.gr-cdn-e.eu *.gr-wcon.com *.bing.com handshakemarketing.fi *.handshakemarketing.fi *.paypal.com *.googleadservices.com *.doubleclick.net *.snapchat.com *.bing.com *.tkcdn.net valostore.com valostore.com www.autodude.fi autodude.fi valostore.fi www.valostore.fi valostore.se www.valostore.se valostore.no www.valostore.no autodude.se www.autodude.se autodude.no www.autodude.no metrics.valostore.com sc.lfeeder.com talkie-se-assets.storage.googleapis.com *.talkie.se *.fw-cdn.com *.freshworks.com *.talkie.se *.klarna.com *.klarnaservices.com *.klarnacdn.net *.klarna.net *.kustom.co static.criteo.net *.criteo.com *.hotjar.com *.getblue.io sc.lfeeder.c
strict-transport-security: max-age=15552000