stiletto.fi

Technology

Server

nginx

CMS

Gatsby

Third-party hosts loaded (1)

• cdn.ravenjs.com×2

Registration

Created

2008-05-23

Name servers

• ns2.helppi.net [ok]
• ns1.welcomnet.fi [93.90.48.4] [ok]

DNS records live

NS

• ns1.welcomnet.fi
• ns2.helppi.net

MX

• 0 stiletto-fi.mail.protection.outlook.com

Verified for

• Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.welcomnet.fi include:spf.protection.outlook.com include:spf.lianamailer.com +mx ip4:176.93.127.0 include:_spf.dnainternet.net ~all

softfail (~all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncAqKqeyAhjpB8KyORt4UYU+RYbn7DSfvFVqb36JqAU52FbYueGjC3YN0qxcZ0IBPcb0bkbSHRuRbM…
• selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc/ddeAtPPt/nHqCUbTrp3EAV0f3fSYJHDGwBrDZzHfAmKtKeJgCJqF92ZFrnNd4XN14jk0p2+1H/O…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.stiletto.fi/

present

• strict-transport-security
• content-security-policy
• x-frame-options
• x-content-type-options
• referrer-policy

findings

• CSP allows unsafe inline scripts/styles
• CSP uses wildcard sources
• missing Permissions Policy

Linked from (1)

• confirma.fi×1