keilaniemenarc.fi
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress 6.9.4
- jQuery
- 3.7.1
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (4)
- www.googletagmanager.com×2
- awflux.shapespark.com×1
- gmpg.org×1
- www.google.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- ns-132-c.gandi.net
- ns-198-a.gandi.net
- ns-9-b.gandi.net
Email authentication no MX
- SPF
-
v=spf1 a mx include:sendgrid.net ~allsoftfail (~all) - DMARC
- not published
- DKIM
-
- s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5nsN+5OhDVIiLPd0N7eNjADcZFvccnols/V+T3rK56cOV4EaskCXTIZTNwRFix5EZlzKxhPAjQartvBFU… - s2:
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCfiTxKU48I+GmMMoOej0h5cQZnqyJepyoFu4WRB8ICX4J2P7UupMTnoTBAN0EzuRV1I/VMrGpc7rBjNjThedrDxj…
selectors probed - s1:
Certificate (current)
E8
Expires in 71 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.cookiebot.eu *.piwik.pro *.matomo.cloud *.cookiebot.com snap.licdn.com *.clarity.ms connect.facebook.net *.googleadservices.com googleads.g.doubleclick.net *.googlesyndication.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com; worker-src 'self' 'unsafe-inline' blob:; img-src 'self' *.gravatar.com data: *.facebook.com *.linkedin.com googleads.g.doubleclick.net www.googleadservices.com *.google.com *.googlesyndication.com *.google.fi; font-src 'self' 'unsafe-inline' data:; connect-src 'self' *.piwik.pro *.matomo.cloud *.cookiebot.com *.cookiebot.eu *.google.com *.google.fi *.clarity.ms *.linkedin.com googleads.g.doubleclick.net *.google-analytics.com *.doubleclick.net *.googlesyndication.com; media-src 'self'; frame-src 'self' https://awflux.shapespark.com *.cookiebot.com *.cookiebot.eu *.facebook.com googleads.g.doublecli- strict-transport-security
max-age=63072000;