sjk.fi

HTML metadata

Title

SJK Seinäjoki - Meidän Kerho - SJK

Description

SJK on seinäjokelainen jalkapalloseura, joka pelaa Veikkausliigassa. SJK pelaa kotiottelunsa OmaSp Stadionilla. Seuran tunnusvärit ovat musta, kullankeltainen ja valkoinen.

Language

fi

Generator

SJK Divi Child v.2.0.7

Canonical

https://sjk.fi/

Feeds

SJK » syöte RSS
SJK » kommenttien syöte RSS

Open Graph

url: https://sjk.fi/
title: SJK Seinäjoki - Meidän Kerho - SJK
locale: fi_FI
site name: SJK
description: SJK on seinäjokelainen jalkapalloseura, joka pelaa Veikkausliigassa. SJK pelaa kotiottelunsa OmaSp Stadionilla. Seuran tunnusvärit ovat musta, kullankeltainen ja valkoinen.

Technology

Server: nginx
CMS: WordPress
jQuery: 3.7.1

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (6)

fonts.googleapis.com×2
unpkg.com×2
app.sportovivo.com×1
cdn-cookieyes.com×1
www.facebook.com×1
www.googletagmanager.com×1

Social

Contact

Email

info@sjk.fi

Phone

DNS records live

NS

ns-115-b.gandi.net
ns-129-a.gandi.net
ns-18-c.gandi.net

MX

10 mx2.dmail.fi
20 mx1.dmail.fi

Verified for

Microsoft 365

Email authentication partial

SPF: v=spf1 a mx include:spf.protection.outlook.com include:19997400.spf08.hubspotemail.net include:sendgrid.net include:amazonses.com ~all
softfail (~all)
DMARC: v=DMARC1; p=none;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

E7

from 2026-05-23 to 2026-08-21

Expires in 77 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://sjk.fi/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak content type protection
missing Referrer Policy

Header values

x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), microphone=(), camera=()
x-content-type-options: nosniff, nosniff
content-security-policy: default-src 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://www.youtube.com https://tracking.collector.datatalks.se https://cdn.datatables.net https://wpovernight.com https://cdn.jsdelivr.net https://stats.wp.com https://www.google.com https://www.gstatic.com https://*.vismapay.com https://vismapay.com https://sc.lfeeder.com https://www.googletagmanager.com https://connect.facebook.net https://maps.googleapis.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.vismapay.com https://vismapay.com https://cdn.datatables.net https://cdn.jsdelivr.net https://use.fontawesome.com https://use.typekit.net https://fonts.googleapis.com; font-src 'self' data: https://*.vismapay.com https://vismapay.com https://cdn.jsdelivr.net https://use.fontawesome.com https://use.typekit.net https://use.typekit.com https://fonts.gstatic.com; connect-src 'se
strict-transport-security: max-age=31536000; includeSubDomains; preload