s-ryhma.fi

.fi crawl

First seen 2026-05-19 · Last seen 2026-05-31 · ok HTTP/1.1 200 3051 ms crawled 2026-05-24

US · 13.33.235.120 · AS16509 Amazon.com, Inc.

Reputation 92/100 no dmarc policy

sector b2b services type homepage

HTML metadata

Title: S-ryhmä - S-ryhmä
Description: Olemme asiakkaiden omistama suomalainen vähittäiskaupan ja palvelualan yritysverkosto, jolla on Suomessa yli 1 800 toimipaikkaa ja yli 40 000 työntekijää.
Language: fi

Open Graph

title: S-ryhmä
description: Olemme asiakkaiden omistama suomalainen vähittäiskaupan ja palvelualan yritysverkosto, jolla on Suomessa yli 1 800 toimipaikkaa ja yli 40 000 työntekijää.

Technology

CDN: Amazon CloudFront
CMS: Next.js
JS framework: Next.js

Analytics

Google Tag Manager

Cookie consent

Usercentrics

Third-party hosts loaded (3)

app.usercentrics.eu×1
images.ctfassets.net×1
www.googletagmanager.com×1

Social

DNS records live

NS

ns-1147.awsdns-15.org
ns-1685.awsdns-18.co.uk
ns-175.awsdns-21.com
ns-918.awsdns-50.net

MX

10 mx-in1.euronic.fi
20 mx-in2.euronic.fi

TXT

y6w9xs6sp7n6j7vkm6fnmzq4lf2rtc4t

Verified for

Apple
Google
Meta

Email authentication weak

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Amazon RSA 2048 M04

from 2026-03-29 to 2026-10-13

Expires in 134 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://s-ryhma.fi/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer
x-content-type-options: nosniff
content-security-policy: default-src 'self';img-src 'self' data: *.usercentrics.eu *.ctfassets.net *.s-cloud.fi *.flockler.com pbs.twimg.com *.cloudfront.net https://custom.livezhat.fi/ *.googletagmanager.com *.google-analytics.com *.crazyegg.com *.ytimg.com;media-src 'self' *.ctfassets.net;object-src 'self' *.usercentrics.eu;style-src 'self' 'unsafe-inline' *.flockler.com https://custom.livezhat.fi/elisa_blue/elisachat.css *.crazyegg.com;script-src 'self' *.usercentrics.eu 'unsafe-eval' 'unsafe-inline' *.googletagmanager.com *.google-analytics.com *.flockler.com https://unpkg.com/axios/dist/axios.min.js https://zefzhat-eu.appspot.com/code/sok/ https://storage.googleapis.com/livezhat/lz_extra/ *.crazyegg.com;script-src-attr 'unsafe-inline';connect-src 'self' *.usercentrics.eu *.contentful.com *.s-cloud.fi *.flockler.com *.addsearch.com *.google-analytics.com https://sok-form-api.elisadesk.com https://stats.livezhat.com/track/e/ https://zefzhat-eu.appspot.com/ChatServlet *.crazyegg.com;font-src 'self' data: ht
strict-transport-security: max-age=63072000; includeSubDomains
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin