indexo.dev

upmbiofuels.com

.com crawl

First seen 2026-06-04 · Last seen 2026-06-04 · ok HTTP/1.1 200 330 ms crawled 2026-06-04

SE · 217.114.94.2 · AS30811 Optimizely AB

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
The Best Alternatives to Fossil Raw Materials | UPM Biofuels
Description
UPM Biofuels makes sustainable products to decrease emissions and mitigate climate change. Our products meet the most demanding sustainability requirements and are made in Finland.
Language
en
Canonical
https://www.upmbiofuels.com/
Translations
  • en
  • fi
  • sv

Open Graph

url
https://www.upmbiofuels.com/
title
UPM Biofuels
site name
The Best Alternatives to Fossil Raw Materials | UPM Biofuels
description
UPM Biofuels makes sustainable products to decrease emissions and mitigate climate change. Our products meet the most demanding sustainability requirements and are made in Finland.

Technology

CDN
Cloudflare
CMS
Gatsby

Social

Contact

Phone

Registration

Registrar
CSC Corporate Domains, Inc.
Created
2007-12-11
Expires
2026-12-11 188 days left
Updated
2025-12-07
Name servers
  • ns.domainnetwork.se
  • ns2.domainnetwork.se

DNS records live

NS
  • ns.domainnetwork.se
  • ns2.domainnetwork.se
Verified for
  • Meta

Email authentication no MX

SPF
v=spf1 -all
strict (-all)
DMARC
v=DMARC1; p=quarantine; rua=mailto:dmarc@upm-kymmene.com; ruf=mailto:dmarc@upm-kymmene.com; pct=100; fo=1
policy: quarantine
DKIM
no key found at common selectors

Certificate (current)

WE1
from 2026-04-20 to 2026-07-19
Expires in 44 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://www.upmbiofuels.com/

present
  • content-security-policy
  • referrer-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing frame protection
  • missing content type protection
  • missing Permissions Policy
Header values
referrer-policy
no-referrer-when-downgrade
content-security-policy
default-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: googletagmanager.com tagmanager.google.com *.googletagmanager.com www.googleadservices.com www.google.com pagead2.googlesyndication.com googleads.g.doubleclick.net *.typekit.net *.episerver.net zefzhat.appspot.com *.hotjar.com *.hotjar.io *.google-analytics.com analytics.google.com code.jquery.com az416426.vo.msecnd.net dc.services.visualstudio.com netdna.bootstrapcdn.com pi.pardot.com syndication.twitter.com sjs.bizographics.com connect.facebook.net stats.livezhat.com *.ads.linkedin.com www.linkedin.com s.ytimg.com *.googleapis.com googleapis.com api.siteattention.com cdn.syndication.twimg.com flockler.com embed-cdn.flockler.com static.flockler.com fl-cdn.scdn1.secure.raxcdn.com cdn.datatables.net *.licdn.com www.youtube.com gateway.zscloud.net viewer.blipstar.com static.handpickedcherries.com maxcdn.bootstrapcdn.com rules.quantcount.com secure.quantserve.com apps.myzef.com tools.eurolandir.com webcc

Links to (6)

Linked from (1)