indexo.dev

cloetta.fi

.fi crawl

First seen 2026-05-15 · Last seen 2026-05-20 · ok HTTP/1.1 200 670 ms crawled 2026-05-20

DE · 18.198.13.169 · AS16509 Amazon.com, Inc.

Reputation 100/100

sector food type homepage

HTML metadata

Title
Etusivu | Cloetta
Description
Cloetta Suomi Oy on osa Cloetta-konsernia, joka on Pohjoismaiden johtava makeistalo.
Language
fi
Generator
All in One SEO (AIOSEO) 4.9.7.2
Canonical
https://www.cloetta.fi/
Translations
  • en ×2
  • sv ×2
  • fi
Feeds

Open Graph

url
https://www.cloetta.fi/
title
Etusivu | Cloetta
locale
fi_FI
site name
Cloetta FI |
description
Cloetta Suomi Oy on osa Cloetta-konsernia, joka on Pohjoismaiden johtava makeistalo.

Technology

CDN
Amazon CloudFront
Server
Apache
CMS
WordPress 4.9.7.2 outdated (current 6.8)
jQuery
3.7.1

Third-party hosts loaded (1)

  • gmpg.org×1

Registration

Created
2003-09-01
Name servers
  • ns2.netnames.net [ok]
  • ns1.netnames.net [ok]
  • ns5.netnames.net [ok]
  • ns6.netnames.net [ok]

DNS records live

NS
  • ns1.netnames.net
  • ns2.netnames.net
  • ns5.netnames.net
  • ns6.netnames.net
MX
  • 10 mta01.scanscope.net
  • 20 mail1.scanscope.net
  • 30 mail2.scanscope.net
  • 40 mail3.scanscope.net
TXT
  • +/EGbj5oLwmeg1L3oRZ5Pg0SHqpU2xSspvv+FYB9Xvre9mFS6ZEXBHbDJi1Gdaz9Dr7lAluPgOZ5qHNqbe5lGA==
  • ca3-459fc348088a45f986abd6d7f71d0aa2
  • adobe-sign-verification=39dd7f9dc4b9f0d4c229479f993e37f4
Verified for
  • Google
  • Microsoft 365

Email authentication strong

SPF
v=spf1 include:spf.protection.outlook.com include:scanscope.net -all
strict (-all)
DMARC
v=DMARC1; p=reject; adkim=s; aspf=s;
policy: reject (enforced)
DKIM
no key found at common selectors

Certificate (current)

E7
from 2026-05-04 to 2026-08-02
Expires in 73 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.cloetta.fi/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(self), microphone=()
x-content-type-options
nosniff
content-security-policy
default-src * data: blob: 'unsafe-inline' 'unsafe-eval';
strict-transport-security
max-age=31536000

Links to (1)

Linked from (1)