hus.fi

HTML metadata

Title

Etusivu | HUS

Description

HUS on Suomen suurin yliopistosairaala. Palvelemme kaikilla lääketieteen ja hammaslääketieteen erikoisaloilla. Tarjoamme vaikuttavinta hoitoa, joka päivä, jokaiselle potilaalle. Olet tervetullut meille hoitoon asuinpaikkakunnastasi riippumatta.

Language

fi

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://www.hus.fi/

Translations

en
fi
sv

Open Graph

url: https://www.hus.fi/

Technology

CDN: Azure Front Door
Server: volt-adc
CMS: Drupal

Third-party hosts loaded (1)

cdn.cookiehub.eu×1

Social

Registration

Created

1999-12-30

Name servers

dns3.hus.fi [13.70.195.91] [ok]
dns2.hus.fi [193.135.20.16] [ok]
dns1.hus.fi [193.135.20.15] [ok]
ns2.f5clouddns.com [ok]
ns1.f5clouddns.com [ok]

DNS records live

NS

dns1.hus.fi
dns2.hus.fi
dns3.hus.fi
ns1.f5clouddns.com
ns2.f5clouddns.com

MX

5 hus-fi.mail.protection.outlook.com

TXT

Show 11 TXT records

google-site-verification=p7rtgqgWZKrc4b-iP8Rd4nQQui76Tw4DnRXiXCmfX0Y
apple-domain-verification=2mjimwZknvPBGTMK
MS=ms33245738
canva-site-verification=aRurvbBDaL3Pd39uY-y6iw
heyhack-verification=b169b026-f7ef-4baf-bebd-bba51b2af198
5uTdbgkS0Hzbd6qJR2tjBN6qY2+nlmXXRembDuS+AvO33AZuY6P7WE8CUnGzVF5hN8U76f0A30/cD4PlOYUb3Q==
msfpkey=7gnosoe0bj69tqdjh29mdinzv
atlassian-domain-verification=Kbm4bHhva34wxKiRRfqa0z5mp5fKY0zHJMSVCYBGdcOP8PciE08/kPwEqGIuFib7
_0ab7yhonkzh1aqtebozn6biu9ani062
d365mktkey=gaxgmo0k4lo83w8lar3bqynv
flexera-domain-verification-rmhibgmubjmxmgyf

Email authentication strong

SPF

v=spf1 include:eu.rp.oracleemaildelivery.com include:spf.mailjet.com ip4:185.74.174.132 ip4:198.37.148.143 ip4:131.207.55.52 ip4:131.207.55.53 include:spf3.hus.fi include:spf2.hus.fi include:spf1.hus.fi include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:bewpmykt@ag.eu.dmarcadvisor.com;

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD8STedDul40kQjvOMI3Hy2oJe0rrAyE237gU9pkMK0Eln/laFxItFyMwFJDem5RJ/LzGfcg0BFQdrDxJ/jnD…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCOdnAknRMbNQKeuT44eyuTuLiXDR7+Soae/Skg7mQHYnd4bi9R7q/qZ3+z+VGVBYPwXng56m+dTGl…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu2ohZLJhuXVwf/TG0lG/hZf6Tc+yqERLUY4aCGOPqqXQnZxMiWLiXlWlyNod4g997vbIeBNOU+s9eSpAJ…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDt1GKgMnUhMP5r8Xoa8PtlQyUIYz7MUObgQTQhS/SR6Ttib0/D6t9/Llt2ORHWsedGedA00bPI/Q/ZJ1b3rM1EQw…

selectors probed

Certificate (current)

Entrust OV TLS Issuing RSA CA 2

from 2025-08-07 to 2026-08-08

Expires in 80 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.hus.fi/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
missing Permissions Policy

Header values

referrer-policy: no-referrer, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; base-uri 'self'; object-src 'self'; connect-src wss: https:
strict-transport-security: max-age=31536000; preload