city.fi

HTML metadata

Title

City - Tätä et odottanut

Description

Tätä et odottanut

Language

fi

Canonical

https://www.city.fi/

Feeds

City » syöte RSS

Open Graph

url: https://www.city.fi/
title: City
locale: fi_FI
site name: City
description: Tätä et odottanut

Technology

CDN: Cloudflare
CMS: WordPress
jQuery: 3.7.1

Analytics

Cloudflare Insights
Google Tag Manager

Third-party hosts loaded (6)

challenges.cloudflare.com×2
ads-dev.improvemedia.fi×1
gmpg.org×1
lwadm.com×1
static.cloudflareinsights.com×1
www.googletagmanager.com×1

Social

Contact

Phone

2023-06-29 04

Registration

Created

1997-07-09

Name servers

joan.ns.cloudflare.com [ok]
charles.ns.cloudflare.com [ok]

DNS records live

NS

charles.ns.cloudflare.com
joan.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

MS=E4B97E1B3B97A20CBE8CEC5918D4F6EA19E2787D
have-i-been-pwned-verification=a610d4b83b0cd49ef7fd4db6c8ba7b3c

Verified for

Google

Email authentication strong

SPF

v=spf1 a ip4:94.237.9.99 include:_spf.google.com include:servers.mcsv.net include:email.freshdesk.com include:mail.zendesk.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:14575e7038c04d8ba2ce5ead398b0ca6@dmarc-reports.cloudflare.net,mailto:alerts@city.fi; aspf=r; adkim=r

policy: quarantine

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

WE1

from 2026-05-21 to 2026-08-19

Expires in 79 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.city.fi/

present

strict-transport-security
content-security-policy-report-only
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy

findings

missing Content Security Policy
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: geolocation=(), microphone=(), camera=()
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-embedder-policy: unsafe-none
content-security-policy-report-only: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:;