bureauveritas.fi

HTML metadata

Title

Etusivu | finland

Language

fi

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://www.bureauveritas.fi/

Translations

fi

Technology

CDN: Amazon CloudFront
Server: nginx
CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Registration

Created

1997-06-25

Name servers

pdns2.cscdns.net [ok]
pdns1.cscdns.net [ok]

DNS records live

NS

pdns1.cscdns.net
pdns2.cscdns.net

Email authentication no MX

SPF

v=spf1 -all

strict (-all)

DMARC

v=DMARC1 ; p=reject ; pct=100 ; sp=reject ; adkim=s ; aspf=s ; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:dmarc-reports@bureauveritas.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com,mailto:dmarc-reports@bureauveritas.com

policy: reject (enforced) · sp=reject

DKIM

Show 12 DKIM selectors

default: v=DKIM1; p=
google: v=DKIM1; p=
selector1: v=DKIM1; p=
selector2: v=DKIM1; p=
k1: v=DKIM1; p=
k2: v=DKIM1; p=
mail: v=DKIM1; p=
dkim: v=DKIM1; p=
s1: v=DKIM1; p=
s2: v=DKIM1; p=
mxvault: v=DKIM1; p=
smtpapi: v=DKIM1; p=

selectors probed

Certificate (current)

Amazon RSA 2048 M01

from 2026-02-18 to 2027-03-20

Expires in 292 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.bureauveritas.fi/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://*.bureauveritas.fi; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.google-analytics.com *.googletagmanager.com https://cdnjs.cloudflare.com/ajax/libs/codemirror/ https://cdnjs.cloudflare.com/ajax/libs/select2/ https://cdn.rawgit.com/ckeditor/ckeditor-dev/ https://cdn.rawgit.com/w8tcha/CKEditor-CodeMirror-Plugin/ *.twitter.com *.twitter.co *.twimg.com https://cdn.rawgit.com/ractoon/jQuery-Text-Counter/ https://bam.nr-data.net/ https://unpkg.com/tippy.js@6.2.6/ https://*.newrelic.com https://bam-cell.nr-data.net/ https://cdn.jsdelivr.net/ https://bureauveritas.accessplanit.com/ https://cdn.rawgit.com/ https://www.recaptcha.net/recaptcha/api.js www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/api.js https://bureauveritas14836.activehosted.com/ https://unpkg.com/@popperjs/core@2.11.6/dist/ https://cdn.jsdelivr.net/gh/cferdinandi/tabby@12.0.3/dist/ https://*.privacy-center.org/ https://www.youtube.com/ https://*.matomo.cloud https://*.bureau
strict-transport-security: max-age=31536000; includeSubDomains