🌐
aalto.app 200
🔒 SSL Valid
✨ About this site
A product-sourcing workspace designed for interior designers and architects.
📊 What the data says
This site runs on the Cloudflare, Next.js, Vercel, and React technology stack. It is one year old, holds a mobile performance score of 51, and maintains active security headers.
HTTP Status A three-digit code showing if the site loaded successfully (200), redirects (301/302), or has errors (4xx/5xx).Read more →
200
SSL Expires When the SSL certificate expires. An expired certificate causes browser security warnings.Read more →
in 37d
Domain Expires When the domain registration expires. If not renewed, the domain becomes available to others.Read more →
in 261d
Hosting The company and location where this website's server is physically located.Read more →
Unknown
Security Score based on key HTTP security headers: HSTS, Content-Security-Policy, and X-Frame-Options.Read more →
3/3
IP Address The numerical address of the server hosting this website. Reveals location, provider, and network.Read more →
104.21.69.254
Performance Lighthouse performance score from Google PageSpeed Insights (0–100). Measures real-world loading speed, interactivity and visual stability.
51
mob
Uptime
100%
Performance Lighthouse performance score from Google PageSpeed Insights (0–100). Measures real-world loading speed, interactivity and visual stability. 51
▼
Mobile
Score
Accessibility
Best Practices
SEO
LCP
7.41s
CLS
0.001
FCP
0.92s
TTFB
0.00s
TBT
877ms
SI
5.38s
Checked: 2026-09-04 20:21:24.726374 · View on PageSpeed
Tech Stack Technologies detected on this website: CMS, frameworks, libraries, CDN, and analytics tools. 4
▼
🌐 CDN
Cloudflare
⚙️ Framework
Next.js
☁️ Hosting
Vercel
⚡ JS Framework
React
Screenshot
2026-09-02
▼
Captured: 2026-09-02 13:12:00 · 10.1 KB
DNS Records DNS translates domain names to IP addresses. Records control where the site, email, and services are directed.Read more →
▼
| A (IPv4) | 104.21.69.254172.67.216.254 |
| AAAA (IPv6) | 2606:4700:3034::ac43:d8fe2606:4700:3032::6815:45fe |
| NS | rodney.ns.cloudflare.comperla.ns.cloudflare.com |
| MX | 10 alt4.aspmx.l.google.com5 alt1.aspmx.l.google.com5 alt2.aspmx.l.google.com1 aspmx.l.google.com10 alt3.aspmx.l.google.com |
| TXT (2) |
Services configured via TXT:
Google
Show all TXT recordsgoogle-site-verification=giP2cXuvFIMk30JCcMVXlDKAEmfEByjnUZSkvvdq7Kk v=spf1 include:_spf.google.com ~all |
WHOIS / RDAP Public registration data: who registered the domain, when, and when it expires.Read more →
▼
| Registrar | Key-Systems LLC |
| Registered | 2025-07-11 |
| Expires | 2027-07-11 (in 261 days) |
| Last Updated | 2026-07-14 |
| Status | client transfer prohibited |
SSL Certificate Encrypts the connection between browsers and this website. Valid SSL = HTTPS works.Read more → Valid
▼
| Subject (CN) | aalto.app |
| Issuer | Google Trust Services |
| Valid From | 2026-08-31 |
| Valid Until | 2026-11-29 (37 days left) |
| SANs (2) | aalto.app*.aalto.app |
HTTP Headers Metadata sent by the server: reveals software, caching rules, and security configuration.Read more →
▼
| Status | 200 |
| Server | cloudflare |
| Content-Type | text/html; charset=utf-8 |
| Final URL | https://aalto.app/ |
| x-powered-by | Next.js |
| strict-transport-security | max-age=63072000 |
| content-security-policy | default-src 'self'; script-src 'self' 'unsafe-inline' https://js.stripe.com https://*.posthog.com https://www.googletagmanager.com https://va.vercel-scripts.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; worker-src 'self' blob:; connect-src 'self' https://uqyjtcyyaidbciovhpcm.supabase.co wss://uqyjtcyyaidbciovhpcm.supabase.co https://*.supabase.co wss://*.supabase.co https://api.stripe.com https://*.posthog.com https://*.ingest.sentry.io https://*.sentry.io https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://va.vercel-scripts.com https://cloudflareinsights.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://checkout.stripe.com https://billing.stripe.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; report-uri /api/csp-report; report-to csp-endpoint |
| x-frame-options | DENY |
| x-content-type-options | nosniff |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | camera=(), microphone=(), geolocation=(), payment=(self "https://js.stripe.com") |
| cache-control | private, no-cache, no-store, max-age=0, must-revalidate |
| cf-ray | a4ef3fd15e9a9172-IAD |
Security headers HTTP headers that protect visitors from attacks. HSTS forces HTTPS, CSP controls resource loading, X-Frame-Options prevents clickjacking.Read more →
Hosting Physical infrastructure: where the server is, who operates it, and what network it belongs to.Read more →
▼
| IP Address | 104.21.69.254 |
| Provider | Unknown |
| Organization | N/A |
| ASN | N/A |
| Location | N/A |
Security Score
A (7/7)
▼
Sitemap & Robots
▼
Partially restricted
Some areas are hidden from crawlers, but the main content stays open to search engines.
Areas hidden from crawlers:
Search & filters
1
API & endpoints
1
Other paths
5
Show raw disallow rules (7)
/api/
/auth/
/settings
/collections
/products
/search
/shared/
| Sitemap | Found 34 pages |
| Last modified | 2026-10-23T07:48:53.881Z |
Social & Meta Tags
Complete
▼
| Title | Aalto: Product sourcing for interior designers |
| Description | The product-sourcing workspace for interior designers and architects. Save products from any supplier site, organise them by room and share boards with clients. |
| OG Title | Aalto: Product sourcing for interior designers |
| OG Description | The product-sourcing workspace for interior designers and architects. Save products from any supplier site, organise them by room and share boards with clients. |
| OG Image | https://aalto.app/og/home.png |
| OG Type | website |
| OG Site Name | Aalto |
| Twitter Card | summary_large_image |
| Canonical URL | https://aalto.app |
| Language | en |
Mail Security Email authentication records (SPF & DMARC) that prevent spoofing and phishing from this domain.Read more →
▼
| SPF | ✓ Present v=spf1 include:_spf.google.com ~all |
| DMARC | ✓ Present v=DMARC1; p=none; |
| MX Records | 10 → alt4.aspmx.l.google.com 5 → alt1.aspmx.l.google.com 5 → alt2.aspmx.l.google.com 1 → aspmx.l.google.com 10 → alt3.aspmx.l.google.com |
Other TLDs Other top-level domain variants of this domain name and their availability. 22 active 1 available
▼
Uptime Monitor
▼
| Current Status | 🟢 Online |
| HTTP Status | 200 |
| Response Time | 1975ms |
| Last Checked | 2026-10-20 09:45:53.442528 |
| Uptime (30d) | 100% |
Similar Sites
7
▼
Similarity based on content analysis. More results appear as more domains are indexed.