forex.fi

HTML metadata

Title

Matka alkaa tästä - Valuutta ja elämykset | FOREX

Description

Vaihda valuuttaa, shoppaile, varaa elämyksiä ja löydä lentoja. FOREX tarjoaa kaiken, mitä tarvitset seuraavalle matkallesi ja lomallesi.

Language

fi

Canonical

https://www.forex.fi/

Translations

sv ×2
da
en
fi
nb

Open Graph

url: https://www.forex.fi/
title: Matka alkaa tästä - Valuutta ja elämykset | FOREX
locale: fi
description: Vaihda valuuttaa, shoppaile, varaa elämyksiä ja löydä lentoja. FOREX tarjoaa kaiken, mitä tarvitset seuraavalle matkallesi ja lomallesi.
locale:alternate: sv-FI

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Social widgets

Vimeo Embed

Third-party hosts loaded (10)

cdn.optimizely.com×1
dc.services.visualstudio.com×1
f.vimeocdn.com×1
i.vimeocdn.com×1
player.vimeo.com×1
widget.getyourguide.com×1
www.forex.no×1
www.forex.se×1
www.forexvaluta.dk×1
www.googletagmanager.com×1

Social

Contact

Email

info@forex.fi

Phone

+358 9 417 1053

Registration

Created

2007-11-15

Name servers

ns2-08.azure-dns.net [ok]
ns1-08.azure-dns.com [ok]
ns4-08.azure-dns.info [ok]
ns3-08.azure-dns.org [ok]

DNS records live

NS

ns1-08.azure-dns.com
ns2-08.azure-dns.net
ns3-08.azure-dns.org
ns4-08.azure-dns.info

MX

10 forex-fi.mail.protection.outlook.com

TXT

Show 6 TXT records

tTeWHRoqIJNcM1MA1wqsSi49ANI5Ft5ngU0D0Y9THYE=
k5MhyZuzAHAwkthiDoNmZSccT6w/m+WMooiNRS4K6sI=
m4FM3s2/frykQlc1AO9VIoep0j5WZ7emKewtAPa0Hok=
Lxp/ipSr9PLSMzOioZjpA9pohq7mcU7QDEEgvZDi8ck=
GH0C/g9BtgmjQNJxj/5Nfsp/W3HieppgG4303LKJuWaOj3r0GXJwPsFRiu9I/LWGeOELr6Bu3+W86zDN1ER4bA==
epGVAA8dizoZobNmQnFGnWN1eWGFztaKuE/F2rKvFHk=

Verified for

Apple
Atlassian
Dynamics 365
GlobalSign
Google
Microsoft 365

Email authentication partial

SPF

v=spf1 ip4:52.142.236.20 include:spf-a.telia.com Include:spf-b.telia.com include:_spf.cention.se include:mailout.osl.basefarm.net include:mailout.sth.basefarm.net include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1;p=none;rua=mailto:86a4fe9df7e5797@rep.dmarcanalyzer.com;ruf=mailto:86a4fe9df7e5797@for.dmarcanalyzer.com;sp=none;fo=1;

policy: none (monitoring only) · sp=none

DKIM

selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDFee/useGc+raVIT6psKC/t9z+GRDtowuEGlbjcJC5EwvS8TJlGR9ii8Mr1jrAHcbJpPcO+2/uyFtjy6IgQ1…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMelsQPrXzuxrKtUbCINm06+91Ebj+AjXFEk9bgQ60BXLBLyiw66wCaciOVsOyi6d2YB3bvtOkJaEWt7fp…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw7uxRrayxYbFjPKJmH85ZXplwXV3lsTGYN3T2cODnDYj1YM5kZQmxqUI0SUyZLh0vG9iumfI5XqmhnDog…

selectors probed

Certificate (current)

GlobalSign RSA OV SSL CA 2018

from 2026-05-18 to 2026-12-03

Expires in 182 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.forex.fi/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: publickey-credentials-get=(), xr-spatial-tracking=(), screen-wake-lock=(), cross-origin-isolated=(), web-share=(), picture-in-picture=(self "https://player.vimeo.com" "https://f.vimeocdn.com"), keyboard-map=(), encrypted-media=(), display-capture=(), usb=(), serial=(), payment=(), midi=(), microphone=(), magnetometer=(), geolocation=(), camera=(), fullscreen=(), autoplay=(self "https://player.vimeo.com" "https://f.vimeocdn.com"), accelerometer=()
x-content-type-options: nosniff
content-security-policy: media-src 'self'; script-src https://*.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/js/bootstrap.bundle.min.js https://cdn.jsdelivr.net/npm/feather-icons@4.29.0/dist/feather.min.js https://js.monitor.azure.com https://widget.getyourguide.com https://player.vimeo.com https://f.vimeocdn.com inte.forex.se prep.forex.se 'self' 'nonce-771f9828-e3b7-48f9-9012-39e1a3d1ea82' 'strict-dynamic' https://*.googletagmanager.com https://www.googletagmanager.com https://www.google-analytics.com https://*.googlesyndication.com https://googleads.g.doubleclick.net https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://static.hotjar.com https://script.hotjar.com https://connect.facebook.net https://*.bing.com https://consent.cookiebot.com https://consent.cookiebot.eu https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com blob: https://client.br
strict-transport-security: max-age=31536000; includeSubDomains; preload