ruoto.fi

Technology

Server

nginx

CMS

Gatsby

Third-party hosts loaded (1)

• cdn.ravenjs.com×2

DNS records live

NS

• ns1-fin.global.sonera.fi
• ns1-swe.global.sonera.se
• ns2-fin.global.sonera.fi
• ns2-usa.global.sonera.net

MX

• 0 ruoto-fi.mail.eo.outlook.com

Verified for

• Google

Email authentication partial

SPF

v=spf1 ip4:93.90.48.10 include:spf.protection.outlook.com include:spf.welcomnet.fi -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsUcHbBZYd5KWt6U2OK2c6nn7D74x6sXxXat5BJ1Bup4LNI39OXzcnApiF2h1KANqkK1944+IBqVzRgs7Y…
• s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ7E0P4dmXkHW1xve6cas5W5xUxgtGtU+GG2IeKh1eEp2JMT2zKM9vr9sF0S65CK9SrIYiTyU1h7lecL/X…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.ruoto.fi/

present

• strict-transport-security
• content-security-policy
• x-frame-options
• x-content-type-options
• referrer-policy

findings

• CSP allows unsafe inline scripts/styles
• CSP uses wildcard sources
• missing Permissions Policy