eckeroline.fi

HTML metadata

Title: Tallinnan risteilyt, Helsinki–Tallinna, laivamatkat ja hotellimatkat
Description: Varaa helposti Eckerö Linen risteilyt suomalaisella m/s Finlandialla Helsingistä Tallinnaan. M/s Finlandian kolme päivittäistä lähtöä Helsingistä ja Tallinnasta tarjoavat hyvät aikatauluvaihtoehdot, jos suunnittelet yhden suunnan tai meno-paluumatkaa omalla autolla tai ilman.
Language: fi
Canonical: https://www.eckeroline.fi/

Technology

CDN: Cloudflare
CMS: Gatsby

Cookie consent

Cookiebot

Third-party hosts loaded (3)

consent.cookiebot.com×1
interfaces.zapier.com×1
rum.hlx.page×1

Social

Contact

Phone

06000 43001

DNS records live

NS

dns01.dipcon.com
dns02.ports.se
dns03.ports.se
dns04.ports.net

MX

0 eckeroline-fi.mail.protection.outlook.com

TXT

GhfeSFE
Bc5JImzZ3vzuuCQoTC1eqCatQax9CnZzoq5NGnrjbPYezZO2ta/bmY800Kfjp21jhk6fOo/o7zfkkcIt74dOdQ==

Verified for

GlobalSign
Google
Meta
Microsoft 365

Email authentication partial

SPF

v=spf1 include:_spf.online.superoffice.com include:amazonses.com include:spf1.eckeroline.fi include:em1932.eckeroline.fi include:spf2.eckeroline.fi include:spf.protection.outlook.com include:hostingspf.carus.com include:sendgrid.net include:spf1.emarketeer.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:postmaster@eckeroline.fi; ruf=mailto:postmaster@eckeroline.fi

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDV/HFlPTTOTDxHAKIRpdPINH4XAjllVK14PZNYcPQmuy/zXmY0GE24WKcrUOW+5UubeMhIBHrmE6ypPxN2n5…

selectors probed

Certificate (current)

GlobalSign RSA OV SSL CA 2018

from 2025-06-13 to 2026-07-15

Expires in 44 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://www.eckeroline.fi/

present

strict-transport-security
content-security-policy-report-only
x-frame-options
x-content-type-options

findings

short HSTS max-age
missing Content Security Policy
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=2592000; includeSubDomains
content-security-policy-report-only: font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://use.typekit.net https://www.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.dotdigital-pages.com *.dotdigital.com https://www.facebook.com https://tpc.googlesyndication.com https://consentcdn.cookiebot.com https://assets.braintreegateway.com https://*.paypal.com https://interfaces.zapier.com https://*.zapier.app htt