luhta.com

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since luhta.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html;charset=utf-8

Cache-Control

no-store

Content-Encoding

Not sent

Security

Content-Security-Policy

base-uri 'none'; font-src 'self' https: data:; form-action 'self' https://*.facebook.com/ https://*.luhta.com/; frame-ancestors 'self' https://app.contentful.com; img-src 'self' data: blob: https://*.hotjar.com https://*.stripe.com/ https://*.stripe.com/ https://*.kustom.co/ https://*.fibbl.com/ https://*.ctfassets.net https://imgsct.cookiebot.com/ https://www.facebook.com/ https://connect.facebook.net/ https://*.doubleclick.net/ https://i.vimeocdn.com/ https://maps.gstatic.com/ https://maps.googleapis.com/ https://developers.google.com/ https://www.googleadservices.com/ https://*.googletagmanager.com/ https://*.google-analytics.com/ https://*.ggpht.com/ https://*.google.fi/ https://*.google.com/ https://*.googlesyndication.com/ https://*.pinimg.com/ https://api.luhta.com https://*.api.luhta.com https://*.luhta.com/; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://*.klarnacdn.net/ https://fonts.googleapis.com/ https://static.onsite.voyado.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://luhta.com https://*.googletagmanager.com/ https://*.google-analytics.com/ https://*.googlesyndication.com/ https://*.google.com/ https://*.google.fi/ https://*.doubleclick.net/ https://maps.googleapis.com/ https://www.gstatic.com/ https://*.hotjar.com/ https://*.klarna.com/ https://*.kustom.co/ https://*.js.stripe.com/ https://js.stripe.com/ https://connect-js.stripe.com/ https://consent.cookiebot.com/ https://consentcdn.cookiebot.com/ https://unpkg.com/web-vitals@5.0.1/dist/ https://api.custobar.com/ https://www.custobar.com/ https://cdn.fibbl.com/ https://connect.facebook.net/ https://analytics.tiktok.com/ https://*.api.esales.apptus.cloud/ https://*.luhta.com/ https://*.pinimg.com/ https://*.pinterest.com/ https://assets.voyado.com/ https://static.redeal.se/ https://static.onsite.voyado.com/ https://ct.beslist.nl; upgrade-insecure-requests; connect-src 'self' blob: https://luhta.com https://api.luhta.com https://*.hotjar.com/ https://*.hotjar.io/ wss://ws.hotjar.com/ https://*.klarna.com/ https://*.klarnaevt.com/ https://*.kustom.co/ https://*.js.stripe.com/ https://*.api.esales.apptus.cloud/ https://*.google.com/ https://*.google.fi/ https://*.googlesyndication.com/ https://*.googletagmanager.com/ https://www.googleadservices.com https://www.gstatic.com/ https://*.google-analytics.com/ https://*.analytics.google.com/ https://js.stripe.com/ https://connect-js.stripe.com/ https://maps.googleapis.com/ https://consent.cookiebot.com/ https://consentcdn.cookiebot.com/ https://unpkg.com/web-vitals@5.0.1/dist/ https://api.custobar.com/ https://*.fibbl.com/ https://connect.facebook.net/ https://www.facebook.com/ https://analytics.tiktok.com/ https://*.doubleclick.net/ https://*.luhta.com/ https://vimeo.com/ https://*.vimeo.com/ https://*.pinimg.com/ https://*.pinterest.com/ https://api.onsite.voyado.com/ https://assets.voyado.com/ https://*.redeal.se/ https://ct.beslist.nl; frame-src 'self' https://luhta.com data: https://*.kustom.co/ https://*.doubleclick.net/ https://*.klarna.com/ https://*.js.stripe.com/ https://js.stripe.com/ https://connect-js.stripe.com/ https://hooks.stripe.com/ https://eu-assets.playground.klarnaservices.com/ https://eu-assets.klarnaservices.com/ https://consentcdn.cookiebot.com/ https://www.googletagmanager.com/ https://docs.google.com/ https://www.google.com/ https://www.google.fi/ https://player.vimeo.com/ https://www.facebook.com/ https://osm.klarnaservices.com/ https://*.pinterest.com/ https://static.onsite.voyado.com/;

Strict-Transport-Security

max-age=15552000; includeSubDomains

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

no-referrer

Permissions-Policy

camera=(), display-capture=(), fullscreen=(self "https://player.vimeo.com"), geolocation=(self), microphone=()

What each security header does

Redirect chain

1. 1.http://luhta.com/HTTP 301

   → https://luhta.com/

2. 2.https://luhta.com/HTTP 302

   → https://luhta.com/fi

3. 3.https://luhta.com/fiHTTP 200

Meta tags

Title

Kotimainen ulkoilun, muodin ja kodin verkkokauppa | Luhta.com

Description

Vaatteet, kengät ja asusteet suosikkibrändeiltä edullisesti Luhta.com-verkkokaupasta | Ilmainen toimitus yli 50 € tilauksiin | Ilmainen palautus

Canonical

https://luhta.com/fi

Robots

index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1

Generator

Not set

Open Graph title

Kotimainen ulkoilun, muodin ja kodin verkkokauppa

Open Graph description

Vaatteet, kengät ja asusteet suosikkibrändeiltä edullisesti Luhta.com-verkkokaupasta | Ilmainen toimitus yli 50 € tilauksiin | Ilmainen palautus

Open Graph image

https://luhta.com/logos/luhta-com-large.jpg

Open Graph type

Not set

Twitter card

Not set

Twitter title

Not set

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

90

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Nuxtframework

  Found "/_nuxt/" in the page's HTML

• Google Tag Manageranalytics

  Found "googletagmanager.com/gtm.js" in the page's HTML

Related domains