oikotie.fi

.fi crawl

First seen 2026-05-19 · Last seen 2026-05-31 · ok HTTP/1.1 200 11486 ms crawled 2026-05-24

US · 3.174.113.127 · AS16509 Amazon.com, Inc.

Reputation 100/100

sector real estate type homepage

HTML metadata

Title: Oikotie Asunnot | Suomen suosituin asuntopalvelu
Description: Oikotiellä on enemmän koteja ja ostajia kuin missään muualla. Paras paikka ostaa, vuokrata ja myydä. Oikotie Suomen parhaisiin koteihin!
Language: fi
Canonical: https://asunnot.oikotie.fi

Open Graph

url: https://asunnot.oikotie.fi?ref=fb
title: Oikotie Asunnot | Suomen suosituin asuntopalvelu
locale: fi_FI
site name: Oikotie.fi
description: Oikotiellä on enemmän koteja ja ostajia kuin missään muualla. ...

Technology

Server: nginx
Stack: PHP

Analytics

Google Tag Manager

Ads

Google Ads (DoubleClick)
Meta Pixel

Third-party hosts loaded (4)

static.oikotiecdn.fi×4
connect.facebook.net×2
securepubads.g.doubleclick.net×2
www.googletagmanager.com×2

Social

Registration

Created

2000-08-22

Name servers

ns-696.awsdns-23.net [ok]
ns-1757.awsdns-27.co.uk [ok]
ns-146.awsdns-18.com [ok]
ns-1502.awsdns-59.org [ok]

DNS records live

NS

ns-146.awsdns-18.com
ns-1502.awsdns-59.org
ns-1757.awsdns-27.co.uk
ns-696.awsdns-23.net

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

goNuUQbFuftadre8qtUby2CKQxQNYzi4kPXdkc2FC58prK5Yw5yE5J+ZRe0YQcOZH2ySdeLqngmwSsCSoYP20A==

Verified for

Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:mail.zendesk.com include:_u.oikotie.fi._spf.smart.ondmarc.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; pct=100; sp=reject; rua=mailto:3ba3664e@inbox.ondmarc.com; ruf=mailto:3ba3664e@inbox.ondmarc.com; adkim=r; aspf=r; fo=1; rf=afrf; ri=3600

policy: reject (enforced) · sp=reject

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbS+d8nSV2NzXLtRth9UGJ/n5Fqp7ywTWCS4BY8S7iA/SCYkvfTLImw8rCAnh6BxDsmuF+JxJSKwh916oo3/…

selectors probed

Certificates

Loading certificate

HTTP security headers

Header hygiene 75/100 Checked live page: https://asunnot.oikotie.fi

present

strict-transport-security
content-security-policy
x-content-type-options
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy

Header values

permissions-policy: unload=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' https: wss: 'unsafe-inline' 'unsafe-eval'; media-src 'self' https: blob:; img-src 'self' https: data:; form-action 'self'; report-uri /api/latest/csp-reports; report-to csp-endpoint; frame-src https://*;
strict-transport-security: max-age=63072000; includeSubDomains; always