nordhealth.fi — domain check, WHOIS, DNS & reputation

HTML metadata

Title: Nordhealth - Löydä terapeuttisi
Description: Löydä sinulle sopiva terapeutti ja varaa aika helposti. Palvelusta löydät kattavasti terapeutteja ympäri Suomen.
Language: fi

Open Graph

title: Nordhealth - Löydä terapeuttisi
description: Löydä sinulle sopiva terapeutti ja varaa aika helposti. Palvelusta löydät kattavasti terapeutteja ympäri Suomen.

Technology

CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

DNS records live

NS

ns-1159.awsdns-16.org
ns-1851.awsdns-39.co.uk
ns-343.awsdns-42.com
ns-902.awsdns-48.net

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

Verified for

Google

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:144062425.spf08.hubspotemail.net ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:finnishnetsolutions-d@dmarc.report-uri.com; sp=reject;

policy: reject (enforced) · sp=reject

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2025-07-14 to 2026-08-13

Expires in 71 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.nordhealth.fi/fi

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: DENY
permissions-policy: geolocation=(self), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), fullscreen=(self "https://player.vimeo.com"), payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'nonce-YmNiNjFkZmYtZDEyNC00YzE1LWJjNjctZTUxYzY2NzVlZDc5' https://maps.googleapis.com https://eu.i.posthog.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.googletagmanager.com 'strict-dynamic' 'unsafe-inline' https://inferred.litix.io; connect-src 'self' eu.i.posthog.com eu.posthog.com internal-t.posthog.com app.posthog.com nordcdn.net maps.googleapis.com storage.googleapis.com *.mux.com hubspot-forms-static-embed-eu1.s3.amazonaws.com forms-eu1.hsforms.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.google.com https://google.com https://consent.cookie-script.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.fi
strict-transport-security: max-age=63072000; includeSubDomains; preload
cross-origin-opener-policy: same-origin