sitra.fi

HTML metadata

Title

Etusivu - Sitra

Description

Tulevaisuustalo Sitra kirittää ja rahoittaa Suomen uudistumista. Tehtävänämme on edistää hyvinvointia ja vauhdittaa talouden kasvua luonnon kantokyvyn rajoissa.

Language

fi

Generator

WordPress 6.9.4

Canonical

https://www.sitra.fi/

Translations

en
fi
sv

Feeds

Open Graph

url: https://www.sitra.fi/
title: Etusivu - Sitra
locale: fi_FI
site name: Sitra
description: Tulevaisuustalo Sitra kirittää ja rahoittaa Suomen uudistumista. Tehtävänämme on edistää hyvinvointia ja vauhdittaa talouden kasvua luonnon kantokyvyn rajoissa.
locale:alternate: sv_SE

Technology

Server: nginx
CMS: WordPress 6.9.4

Third-party hosts loaded (2)

cdn-eu.readspeaker.com×1
gmpg.org×1

Social

Contact

Email

sitra@sitra.fi

Phone

+358294618991

Registration

Created

1990-12-31

Name servers

edns8.ultradns.biz [ok]
edns8.ultradns.org [ok]
edns8.ultradns.net [ok]
edns8.ultradns.com [ok]

DNS records live

NS

edns8.ultradns.biz
edns8.ultradns.com
edns8.ultradns.net
edns8.ultradns.org

MX

0 sitra-fi.mail.protection.outlook.com

TXT

Show 6 TXT records

_s1i9z2cfrv3bzehhcuccb35w9klkpea
meltwater_sso_20230317_TRITON-13077
ca3-5edd6adc5b754858968b6a994c668267
fastly-domain-delegation-B75futYBn9hbISU7ibS-20240213
mistral-domain-verification=7157c6c296172202f75d9426bee8fa3700b8a204
_78v7edfhz1vnmmv10am77cpszq4vtba

Verified for

Anthropic
Google

Email authentication no MX

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-04-10 to 2026-07-09

Expires in 38 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.sitra.fi/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.cookiebot.eu *.cookiebot.com *.piwik.pro *.matomo.cloud *.riddle.com *.readspeaker.com; style-src 'self' 'unsafe-inline' *.readspeaker.com; worker-src 'self' 'unsafe-inline' blob:; img-src 'self' *.gravatar.com *.cookiebot.com *.cookiebot.eu data:; font-src 'self' 'unsafe-inline' data: *.readspeaker.com; connect-src 'self' *.piwik.pro *.matomo.cloud *.readspeaker.com *.cookiebot.com *.cookiebot.eu; media-src 'self'; frame-src 'self' *.youtube.com *.riddle.com app.powerbi.com *.readspeaker.com *.cookiebot.com *.cookiebot.eu *.office.com, upgrade-insecure-requests
strict-transport-security: max-age=63072000;