ystavankortti.fi

HTML metadata

Technology

Server

nginx

CMS

WordPress 6.8.5

jQuery

3.7.1

Analytics

• Google Tag Manager

Fonts

• Google Fonts

Third-party hosts loaded (5)

• stats.wp.com×2
• www.google.com×2
• fonts.googleapis.com×1
• fonts.gstatic.com×1
• www.googletagmanager.com×1

Social

• facebook
• instagram
• youtube
• tiktok
• twitter

Contact

Phone

• 040 832 9721

DNS records live

NS

• ns-102-c.gandi.net
• ns-132-a.gandi.net
• ns-74-b.gandi.net

MX

• 0 ystavankortti-fi.mail.protection.outlook.com

Email authentication weak

SPF

v=spf1 a mx include:_mailcust.gandi.net include:sendgrid.net ~all

softfail (~all) · multiple SPF records

DMARC

v=DMARC1; p=none; rua=mailto:dmarc@seravo.fi

policy: none (monitoring only)

DKIM

• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5nsN+5OhDVIiLPd0N7eNjADcZFvccnols/V+T3rK56cOV4EaskCXTIZTNwRFix5EZlzKxhPAjQartvBFU…
• s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCfiTxKU48I+GmMMoOej0h5cQZnqyJepyoFu4WRB8ICX4J2P7UupMTnoTBAN0EzuRV1I/VMrGpc7rBjNjThedrDxj…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://ystavankortti.fi/fi/

present

• x-frame-options
• x-content-type-options

findings

• missing HSTS
• missing Content Security Policy
• missing Referrer Policy
• missing Permissions Policy

Links to (6)

• youtube.com×1
• x.com×1
• tiktok.com×1
• sjoenkvtuki.fi×1
• instagram.com×1
• facebook.com×1

Linked from (2)

• sjoenkvtuki.fi×1
• kirvatsinjyta.fi×1