indexo.dev

laatumaa.fi

.fi crawl

First seen 2026-05-27 · Last seen 2026-05-30 · ok HTTP/1.1 200 2128 ms crawled 2026-05-30

US · 34.149.229.56 · AS396982 Google LLC

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Tontit ja metsätilat Metsähallitukselta | Metsähallitus
Description
Metsähallitus myy valtion mailta loma- ja rantatontteja, metsätiloja ja metsäpalstoja eri puolilta Suomea. Tutustu kohteisiimme ja löydä omasi!
Language
fi
Canonical
https://www.laatumaa.fi/

Open Graph

url
https://www.laatumaa.fi/
title
Tontit ja metsätilat Metsähallitukselta | Metsähallitus
locale
fi_FI
site name
Laatumaa
description
Metsähallitus myy valtion mailta loma- ja rantatontteja, metsätiloja ja metsäpalstoja eri puolilta Suomea. Tutustu kohteisiimme ja löydä omasi!

Technology

Server
Google
CMS
WordPress
jQuery
3.7.1
Cookie consent
  • Cookiebot

Third-party hosts loaded (3)

  • consent.cookiebot.com×3
  • maps.googleapis.com×2
  • unpkg.com×2

Social

Registration

Created
2003-09-04
Name servers
  • ns2-fin.global.sonera.fi [195.156.148.158] [2001:2060:ffdd:a02::53] [ok]
  • ns1-swe.global.sonera.se [ok]
  • ns2-usa.global.sonera.net [ok]
  • ns1-fin.global.sonera.fi [193.210.18.31] [2001:2060:ffdd:a01::53] [ok]

DNS records live

NS
  • ns1-fin.global.sonera.fi
  • ns1-swe.global.sonera.se
  • ns2-fin.global.sonera.fi
  • ns2-usa.global.sonera.net
MX
  • 0 laatumaa-fi.mail.protection.outlook.com
TXT
  • amazonses:D2T0+ptuoLFKMqsf8JtxNclvDBYOIwZ/p8lh82sV32w=
Verified for
  • Microsoft 365

Email authentication partial

SPF
v=spf1 include:spf.protection.outlook.com include:spf.lianamailer.com -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:dmarc_agg@vali.email;
policy: none (monitoring only)
DKIM
Show 4 DKIM selectors
  • selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDwcCGYKE0mrs6pUqDNuTDX8Tj1/8gAKQor2LC7mlwiFdMaiHspLHuPO+KCc+wP+XOM0TJwMJ0qdAgrD3V29H…
  • selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDfpTebDtnShVqA4n/FOEEP0+Q36YaccF45e/5cmLczppVzuXoq4mGjbLyfIlICW12J0D2CTcU3gttxCZApsc…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1PPegr5ngVT5wnopyTfuDXx3HQUSbZSI19GDwSL93rJdZTG636Rasv3tPoVT4q6/FxgHWM+ZXYAT6/nWL…
  • s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpgHOiqxOfAEwygJ0FWaZIp/KDQnSs9kn3Eq9jzhJYPsfEruLBAT5KuKzMBphDXV9uRoyD1YEagypupl5Y…
selectors probed

Certificate (current)

WR3
from 2026-05-06 to 2026-08-04
Expires in 64 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.laatumaa.fi/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
no-referrer-when-downgrade
x-frame-options
SAMEORIGIN
permissions-policy
accelerometer=(self "https://*.google.com"), autoplay=(self "https://www.youtube.com"), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(self "https://www.youtube.com"), fullscreen=(self "https://www.youtube.com" "https://*.google.com"), geolocation=(self "https://*.google.com"), gyroscope=(self "https://*.google.com"), keyboard-map=(), magnetometer=(self "https://*.google.com"), microphone=(), midi=(), payment=(), picture-in-picture=(self "https://www.youtube.com" "https://*.google.com"), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(self), gamepad=(), hid=(), idle-detection=(), serial=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; img-src 'self' data: https://imgsct.cookiebot.com https://unpkg.com/leaflet@1.9.4/ *.openstreetmap.org img.cromet.fi *.gravatar.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.googleapis.com googleads.g.doubleclick.net *.google.com *.google.fi *.fls.doubleclick.net ad.doubleclick.net ade.googlesyndication.com secure.adnxs.com *.usercentrics.eu dev.visualwebsiteoptimizer.com *.global.siteimproveanalytics.io *.ytimg.com s.w.org; font-src 'self' data: fonts.gstatic.com; script-src 'self' blob: 'unsafe-eval' 'unsafe-inline' consentcdn.cookiebot.com consent.cookiebot.com *.snoobi.eu www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googletagmanager.com tagmanager.google.com *.google-analytics.com ssl.google-analytics.com *.googleapis.com www.googleadservices.com googleads.g.doubleclick.net www.google.com app.usercentrics.eu dev.visualwebsiteoptimizer.com siteimproveanalytics.com www.youtube.com; style-src 'self' 'unsafe-inline' unpkg.co
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (6)

Linked from (1)