ey.com

HTML metadata

Title: EY Suomi | Shape the future with confidence
Description: Tarjoamme palveluita, jotka auttavat ratkaisemaan asiakkaidemme vaikeimmat haasteet
Language: fi-FI
Canonical: https://www.ey.com/fi_fi

Open Graph

url: https://www.ey.com/fi_fi
title: Shape the future with confidence
description: Tarjoamme palveluita, jotka auttavat ratkaisemaan asiakkaidemme vaikeimmat haasteet

Technology

CDN: Azure Front Door

Cookie consent

OneTrust

Third-party hosts loaded (2)

cdn.cookielaw.org×1
players.brightcove.net×1

Social

Registration

Registrar

SafeNames Ltd.

Created

1994-04-22

Expires

2027-04-23 339 days left

Updated

2026-04-10

Name servers

defrnrazdns01.ey.com
derusrazdns01.ey.com
sgsinrazdns01.ey.com
usfwtrazdns01.ey.com
uspilrazdns01.ey.com

DNS records live

NS

defrnrazdns01.ey.com
derusrazdns01.ey.com
sgsinrazdns01.ey.com
usfwtrazdns01.ey.com
uspilrazdns01.ey.com

MX

0 mx1.hc4518-41.iphmx.com
0 mx2.hc4518-41.iphmx.com
5 mx1.hc497-45.ca.iphmx.com
5 mx2.hc497-45.ca.iphmx.com

TXT

Show 25 TXT records

pendo-domain-verification=7c015e1a-6736-4735-9f04-ec6ebec113c0
openai-domain-verification=dv-Shd0M7TuyMgS2F3kBnGQcpT3
_globalsign-domain-verification=axam_yX2CESbvMzYPV-vtEtdxuzr51AArot2dD0UuS
docker-verification=3a445dcc-d2a5-42d0-999c-012dccf86048
docusign=6b01fa2d-5969-442c-ba7b-1d283ce469ce
google-site-verification=pA5sXOE5vuWCzkghdlA1bZApppt7V_Bicz9LeJtNXEI
cisco-ci-domain-verification=6de4aeefa142909ce960a8166d65a158e2afe01d249e2a71c0975378869ee4c
cjm6ht8ll92lfrv2hlgvsdolig
atlassian-domain-verification=taexKeOqyH4eabXLOnocS/798edhDOnaxCF7Og63/PVyYPyf///AoPZIdbDRXfS7
elastic_domain_challenge=d44ffba3e3400e0d1ed6825f7c8438178a9ee49f00b630d5566efd02c0df89e1
ouddeo8ncn3gp5294bl4ripmpc
apple-domain-verification=gXSOeETm9rYNujNF
atlassian-domain-verification=NqdxP4Jp8IZY5P7G0tSU52bjCTt7LPBw8P9XtwE1k7y2+lvQ1ZSdF64dalHyWCdx
74j3VvfS2110UkObDZAY
apple-domain-verification=5eGcHCI6vSqqmonz
anthropic-domain-verification-tnk012=gCWNVJIPSQbjJDStGTh5HuDlx
mongodb-site-verification=9b4WUuSvewHvwVYnOk31BXmaRBIXTTrM
docusign=d8aadd18-ba88-48a6-b430-c8035d990a55
_globalsign-domain-verification=w79G9w4s_ydP5fjdIRrUiCPZhiZ5dVbfIsGbNT2Ei3
_globalsign-domain-verification=QRsUPMvMuflsnhkeuePRXDDJAtR4K5_yYB9MwfrUKN
browserstack-domain-verification=210c6ad2-13b5-4bb9-9e80-01231d0d524b
postman-domain-verification=2213fff4e24f70d4e91ba46cd60ed8185591e7ae55b5e55aecb62d346bc94b36
SFMC-3kcpOVF5pFXqvVWA6pvs8wiGKbReQR9o776sNltR
fastly-domain-delegation-bXQcsyeSTyfp4jad-00397362-2025-05-05
atlassian-domain-verification=RMR0Lc76sETwQZnNXrMviQYR25KDf5KY1/kqtafkNgW5vuBPN0KjO5iJDKX0ECvp

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com exists:%{i}._i.%{d}._d.espf.agari-dns.net include:%{d}.da.spf-protect.agari-dns.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; pct=100; ri=3600; rua=mailto:ey@rua.agari.com; ruf=mailto:ey@ruf.agari.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArStK5RFW8GAvUn80Z+yEifhcRAPy6ZaVKG7aDeZCZj7I0QnWZr7kYbnIa+YqbQsSYz0FOTtdTc/r7b…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlPooEF8lVlJVwIygkBpb2SmDgXWHRYgN3crT/2aUY1MYc74RHzhnztDuayvO9Ufn8e8QKH67amBSVXiOE…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NuaVZctnzLC8Jo1bWH70qL7gL7oKEGdVk5Y5eVVj1NhmhLW9cLln6vBIKQsZRQ+D2IlYCqdTfJXiyFpwR…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2025-08-18 to 2026-08-19

Expires in 92 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.ey.com/fi_fi

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src http: https: data:; media-src http: https: data: blob: ey.com www.ey.com apps.ey.com aemapps.ey.com ey-preview.ey.com; img-src http: https: data: blob: assets.adoberesources.net lh3.googleusercontent.com; script-src http: https: data: 'self' 'unsafe-inline' assets.adobedtm.com players.brightcove.net edge.api.brightcove.com metrics.brightcove.com vjs.zencdn.net edge-player.wirewax.com manifest.prod.boltdns.net bcboltbde696aa-a.akamaihd.net cdn.cookielaw.org assets.adoberesources.net documentcloud.adobe.com aemapps.ey.com aemapps-preview.ey.com; style-src http: https: data: 'self' 'unsafe-inline' assets.adobedtm.com players.brightcove.net players.brightcove.net edge.api.brightcove.com metrics.brightcove.com vjs.zencdn.net edge-player.wirewax.com manifest.prod.boltdns.net bcboltbde696aa-a.akamaihd.net cdn.cookielaw.org *.typekit.net aemapps.ey.com aemapps-preview.ey.com ; connect-src http: https: data: *.adobe.io wss://*.adobe.io; worker-src http: https: data: blob: ey.com www
strict-transport-security: max-age=31536000; includeSubDomains