eralehti.fi

HTML metadata

Technology

CDN

Amazon CloudFront

Server

nginx

CMS

Gatsby

Analytics

• Google Tag Manager

Third-party hosts loaded (4)

• storage.googleapis.com×2
• api.tiles.mapbox.com×1
• applets.ebxcdn.com×1
• www.googletagmanager.com×1

DNS records live

NS

• ns-1522.awsdns-62.org
• ns-1721.awsdns-23.co.uk
• ns-382.awsdns-47.com
• ns-880.awsdns-46.net

MX

• 5 secure.otavakonserni.fi

Email authentication partial

SPF

v=spf1 include:spf.lianamailer.com -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

no key found at common selectors

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://eralehti.fi/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Linked from (1)

• otavamedia.fi×1