kymenseudunosuuskauppa.fi

.fi crawl

First seen 2026-05-19 · Last seen 2026-05-29 · ok HTTP/1.1 200 8810 ms crawled 2026-05-24

US · 3.164.206.83 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Etusivu – KSO
Description: Kymen Seudun Osuuskauppa, eli KSO, on market- ja tavaratalokauppaa, matkailu- ja ravitsemiskauppaa sekä liikennemyymälä- ja polttonestekauppaa harjoittava monialayritys.
Language: fi

Open Graph

title: Kymen Seudun Osuuskauppa
description: Kymen Seudun Osuuskauppa, eli KSO, on market- ja tavaratalokauppaa, matkailu- ja ravitsemiskauppaa sekä liikennemyymälä- ja polttonestekauppaa harjoittava monialayritys.

Technology

CDN: Amazon CloudFront
CMS: Next.js

Third-party hosts loaded (1)

cdn.s-cloud.fi×30

Social

Registration

Created

2012-06-01

Name servers

ns-461.awsdns-57.com [ok]
ns-1670.awsdns-16.co.uk [ok]
ns-1145.awsdns-15.org [ok]
ns-619.awsdns-13.net [ok]

DNS records live

NS

ns-1145.awsdns-15.org
ns-1670.awsdns-16.co.uk
ns-461.awsdns-57.com
ns-619.awsdns-13.net

Email authentication no MX

SPF: v=spf1 include:oracleindustry.com include:microsdc.com ~all
softfail (~all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Amazon RSA 2048 M01

from 2026-04-08 to 2026-10-23

Expires in 144 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://kymenseudunosuuskauppa.fi/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'nonce-ODhlMDFkY2QtNTNlOC00MzRmLTkwYzEtZDc4Y2NjZTQxZDYw' 'strict-dynamic' 'unsafe-eval'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' *.typekit.net https://fonts.googleapis.com https://googletagmanager.com https://ninchat.com https://tagmanager.google.com https://www.juicer.io; img-src 'self' blob: data: https://*.facebook.com https://*.facebook.net https://*.g.doubleclick.net https://*.google-analytics.com https://*.google.com https://*.googletagmanager.com https://*.s-cloud.fi https://*.usercentrics.eu https://ad.doubleclick.net https://ade.googlesyndication.com https://adservice.google.com https://assets.juicer.io https://google.com https://google.fi https://googleads.g.doubleclick.net https://googletagmanager.com https://i.ytimg.com https://ninchat.com https://pagead2.googlesyndication.com https://ssl.gstatic.com https://www.google.com https://www.google.fi https://www.googleadservices.com https://www.googletagmanager.com https://ww
strict-transport-security: max-age=15552000; includeSubDomains
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: same-origin

Links to (21)

Linked from (5)