nordicaluminium.fi

HTML metadata

Technology

Server

nginx

CMS

WordPress 5.4.19 outdated (current 6.8)

Fonts

• Google Fonts

Social widgets

• Vimeo Embed

Third-party hosts loaded (4)

• fonts.googleapis.com×2
• gmpg.org×1
• player.vimeo.com×1
• s.w.org×1

Contact

Email

• globalinfo@nordicaluminium.fi

Registration

Created

1997-06-18

Name servers

• oxygen.ns.hetzner.com [ok]
• helium.ns.hetzner.de [ok]
• hydrogen.ns.hetzner.com [ok]

DNS records live

NS

• helium.ns.hetzner.de
• hydrogen.ns.hetzner.com
• oxygen.ns.hetzner.com

MX

• 0 nordicaluminium-fi.mail.protection.outlook.com

Verified for

• Microsoft 365

Email authentication partial

SPF

v=spf1 ip4:231.28.124.87 include:posti.saas.cldpart.net include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc@seravo.fi

policy: none (monitoring only)

DKIM

• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5nsN+5OhDVIiLPd0N7eNjADcZFvccnols/V+T3rK56cOV4EaskCXTIZTNwRFix5EZlzKxhPAjQartvBFU…
• s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCfiTxKU48I+GmMMoOej0h5cQZnqyJepyoFu4WRB8ICX4J2P7UupMTnoTBAN0EzuRV1I/VMrGpc7rBjNjThedrDxj…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://nordicaluminium.fi/

present

• x-frame-options
• x-content-type-options

findings

• missing HSTS
• missing Content Security Policy
• missing Referrer Policy
• missing Permissions Policy

Linked from (1)

• arclite.de×1