admuseo.fi
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress 6.9.4
- jQuery
- 3.7.1
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- www.googletagmanager.com×2
- gmpg.org×1
Social
Contact
- Phone
Registration
- Created
- 2021-08-11
- Name servers
-
- ns2.cloudcity.fi [94.237.25.23] [2a04:3542:1000:910:bc42:40ff:fec3:7b30] [ok]
- ns1.cloudcity.fi [185.220.76.33] [2a0b:f240:0:3::33] [ok]
DNS records live
- NS
-
- ns1.cloudcity.fi
- ns2.cloudcity.fi
- MX
-
- 1 admuseo-fi.mail.protection.outlook.com
- Verified for
-
- Microsoft 365
Email authentication partial
- SPF
-
v=spf1 include:spf.protection.outlook.com include:_spf.createsend.com include:sendgrid.net -allstrict (-all) - DMARC
-
v=DMARC1;p=none;pct=100;rua=mailto:dmarc@somic.fipolicy: none (monitoring only) - DKIM
-
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ByN6Uqu8zx65LeHYn+iRqkwnrHiN805/LYUZngaw6ENMF0vNC2K69PmyQKKgQIYm6oa3TanZfdsfG… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5nsN+5OhDVIiLPd0N7eNjADcZFvccnols/V+T3rK56cOV4EaskCXTIZTNwRFix5EZlzKxhPAjQartvBFU… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCfiTxKU48I+GmMMoOej0h5cQZnqyJepyoFu4WRB8ICX4J2P7UupMTnoTBAN0EzuRV1I/VMrGpc7rBjNjThedrDxj…
selectors probed - google:
Certificate (current)
R12
Expires in 47 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' 'unsafe-inline' *.google.com *.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.cookiebot.com *.piwik.pro *.matomo.cloud *.createsend1.com; style-src 'self' 'unsafe-inline'; worker-src 'self' 'unsafe-inline' blob:; img-src 'self' *.gravatar.com data: *.cookiebot.com *.google.fi *.google.com *.googleadservices.com; font-src 'self' 'unsafe-inline' data:; connect-src 'self' *.piwik.pro *.matomo.cloud *.cookiebot.com *.google.com *.google-analytics.com *.createsend1.com *.createsend.com createsend.com; media-src 'self'; frame-src 'self' https://youtu.be https://www.youtube.com https://www.youtube-nocookie.com https://*.issuu.com *.cookiebot.com; script-src-elem 'self' 'unsafe-inline' *.youtu.be *.youtube.com *.googletagmanager.com *.cookiebot.com www.google.com *.gstatic.com *.createsend1.com; form-action 'self' *.createsend.com createsend.com, upgrade-insecure-requests- strict-transport-security
max-age=63072000;