{ "ok": true, "domain": "finnair.com", "generated_at": "2026-08-09T22:05:51-05:00", "cache": { "hit": true, "ttl": 0 }, "score": { "total": 78, "label": "Good", "categories": { "dns": 70, "mail": 90, "security": 81, "network": 100, "availability": 60 }, "category_weights": { "dns": 25, "mail": 20, "security": 25, "network": 10, "availability": 20 }, "items": [ { "category": "dns", "title": "IPv4 (A)", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "4 IPv4 address(es) detected." }, { "category": "dns", "title": "IPv6 (AAAA)", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "8 IPv6 address(es) detected." }, { "category": "dns", "title": "Name server redundancy", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "4 NS record(s); 2 or more required." }, { "category": "dns", "title": "SOA record", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Authoritative zone record." }, { "category": "dns", "title": "DNSSEC chain", "max_points": 15, "earned_points": 0, "lost_points": 15, "detail": "Both DS and DNSKEY are required." }, { "category": "dns", "title": "CAA policy", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Certificate authority restriction." }, { "category": "dns", "title": "DNS propagation", "max_points": 10, "earned_points": 0, "lost_points": 10, "detail": "Agreement between public resolvers." }, { "category": "mail", "title": "MX records", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "1 MX record(s)." }, { "category": "mail", "title": "SPF", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "SPF policy published." }, { "category": "mail", "title": "DMARC", "max_points": 25, "earned_points": 25, "lost_points": 0, "detail": "DMARC policy published." }, { "category": "mail", "title": "DKIM", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "A DKIM selector was verified." }, { "category": "mail", "title": "MTA-STS", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "Mail transport policy." }, { "category": "mail", "title": "TLS-RPT", "max_points": 5, "earned_points": 0, "lost_points": 5, "detail": "TLS reporting policy." }, { "category": "security", "title": "Valid TLS certificate", "max_points": 55, "earned_points": 55, "lost_points": 0, "detail": "81 day(s) remaining." }, { "category": "security", "title": "Certificate lifetime", "max_points": 10, "earned_points": 10, "lost_points": 0, "detail": "Full points require at least 30 days remaining." }, { "category": "security", "title": "HTTP security headers", "max_points": 35, "earned_points": 16, "lost_points": 19, "detail": "4 of 9 evaluated headers detected." }, { "category": "network", "title": "PTR reverse DNS", "max_points": 30, "earned_points": 30, "lost_points": 0, "detail": "PTR: server-108-157-150-43.mci50.r.cloudfront.net" }, { "category": "network", "title": "IPv4 diversity", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "Two or more IPv4 addresses receive full points." }, { "category": "network", "title": "IPv6 connectivity", "max_points": 35, "earned_points": 35, "lost_points": 0, "detail": "AAAA availability." }, { "category": "availability", "title": "DNS resolution", "max_points": 40, "earned_points": 40, "lost_points": 0, "detail": "At least one address family must resolve." }, { "category": "availability", "title": "HTTP response", "max_points": 40, "earned_points": 0, "lost_points": 40, "detail": "HTTP/2 403 " }, { "category": "availability", "title": "HTTPS final URL", "max_points": 20, "earned_points": 20, "lost_points": 0, "detail": "Final URL uses HTTPS." } ], "methodology": "Each category is normalized to 100. The total is the weighted sum: DNS 25%, Email 20%, Security 25%, Network 10%, Availability 20%.", "diagnostics": [ { "level": "ok", "title": "IPv4 (A)", "detail": "4 IPv4 address(es) detected.", "category": "dns", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "ok", "title": "IPv6 (AAAA)", "detail": "8 IPv6 address(es) detected.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "ok", "title": "Name server redundancy", "detail": "4 NS record(s); 2 or more required.", "category": "dns", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SOA record", "detail": "Authoritative zone record.", "category": "dns", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "error", "title": "DNSSEC chain", "detail": "Both DS and DNSKEY are required.", "category": "dns", "max_points": 15, "earned_points": 0, "lost_points": 15 }, { "level": "error", "title": "CAA policy", "detail": "Certificate authority restriction.", "category": "dns", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "DNS propagation", "detail": "Agreement between public resolvers.", "category": "dns", "max_points": 10, "earned_points": 0, "lost_points": 10 }, { "level": "ok", "title": "MX records", "detail": "1 MX record(s).", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "ok", "title": "SPF", "detail": "SPF policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DMARC", "detail": "DMARC policy published.", "category": "mail", "max_points": 25, "earned_points": 25, "lost_points": 0 }, { "level": "ok", "title": "DKIM", "detail": "A DKIM selector was verified.", "category": "mail", "max_points": 20, "earned_points": 20, "lost_points": 0 }, { "level": "error", "title": "MTA-STS", "detail": "Mail transport policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "error", "title": "TLS-RPT", "detail": "TLS reporting policy.", "category": "mail", "max_points": 5, "earned_points": 0, "lost_points": 5 }, { "level": "ok", "title": "Valid TLS certificate", "detail": "81 day(s) remaining.", "category": "security", "max_points": 55, "earned_points": 55, "lost_points": 0 }, { "level": "ok", "title": "Certificate lifetime", "detail": "Full points require at least 30 days remaining.", "category": "security", "max_points": 10, "earned_points": 10, "lost_points": 0 }, { "level": "warning", "title": "HTTP security headers", "detail": "4 of 9 evaluated headers detected.", "category": "security", "max_points": 35, "earned_points": 16, "lost_points": 19 }, { "level": "ok", "title": "PTR reverse DNS", "detail": "PTR: server-108-157-150-43.mci50.r.cloudfront.net", "category": "network", "max_points": 30, "earned_points": 30, "lost_points": 0 }, { "level": "ok", "title": "IPv4 diversity", "detail": "Two or more IPv4 addresses receive full points.", "category": "network", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "ok", "title": "IPv6 connectivity", "detail": "AAAA availability.", "category": "network", "max_points": 35, "earned_points": 35, "lost_points": 0 }, { "level": "ok", "title": "DNS resolution", "detail": "At least one address family must resolve.", "category": "availability", "max_points": 40, "earned_points": 40, "lost_points": 0 }, { "level": "error", "title": "HTTP response", "detail": "HTTP/2 403 ", "category": "availability", "max_points": 40, "earned_points": 0, "lost_points": 40 }, { "level": "ok", "title": "HTTPS final URL", "detail": "Final URL uses HTTPS.", "category": "availability", "max_points": 20, "earned_points": 20, "lost_points": 0 } ] }, "dns": { "records": { "A": [ "108.157.150.43", "108.157.150.4", "108.157.150.121", "108.157.150.94" ], "AAAA": [ "2600:9000:24f9:4400:10:c3f4:e780:93a1", "2600:9000:24f9:fe00:10:c3f4:e780:93a1", "2600:9000:24f9:5200:10:c3f4:e780:93a1", "2600:9000:24f9:9800:10:c3f4:e780:93a1", "2600:9000:24f9:3600:10:c3f4:e780:93a1", "2600:9000:24f9:fa00:10:c3f4:e780:93a1", "2600:9000:24f9:d800:10:c3f4:e780:93a1", "2600:9000:24f9:ba00:10:c3f4:e780:93a1" ], "CNAME": [], "MX": [ "50 finnair-com.mail.protection.outlook.com." ], "TXT": [ "\"wjnyqh1w26rd7wn80b7293z9myh305y8\"", "\"docusign=07c89fae-b4bd-4e77-aa7b-743a235f5068\"", "\"00DQI00000JPWOM=1TBQI0000000673\"", "\"google-site-verification=0fqRaXBWnOW_H-HRHtYttt8CRcA6HdZTWC6K5FB3P1o\"", "\"4bwOP8__ZQCxb9yKKo_6\"", "\"anthropic-domain-verification-dvzzpn=HvzeG697DEn2iCUhRJ2wFhWKD\"", "\"atlassian-domain-verification=L7NaiD3A7k0areTndY1HUx3NN3wi4df7aait5AMvaUoShwHEQjnp2DvLZfbW/q4q\"", "\"00D24000000Zb2l=1TBQt00000002I0\"", "\"facebook-domain-verification=xijjs6tuf4ff2h2vh4ar3ptycto80q\"", "\"yandex-verification: 42b7c96390d29df9\"", "\"msfpkey=1nyi8qahaz27jjm9xncglc0iz\"", "\"h1-domain-verification=98k5uRg1nvFH7R89QtJhsQoY4rsRPCmkBDDwJfhSv4FKWSBB\"", "\"dvv-domain-verification-fkop93ajs-j891eHrAa-12082025\"", "\"MS=ms21811250\"", "\"v=spf1 ip4:171.17.133.140/32 ip4:82.150.225.79/32 ip4:217.30.176.0/20 ip4:83.145.192.0/18 ip4:129.35.31.133/32 ip4:195.246.100.0/24 ip4:62.142.5.0/24 ip4:157.200.252.140/32 include:spf.protection.outlook.com include:_spf.salesforce.com include:cust-spf.ex\" \"acttarget.com include:amazonses.com include:sendgrid.net -all\"", "\"mentimeter-ca6617bd-7d51-495b-931c-5d098789878f\"", "\"_spt4tsct9b6tb49swm6r129i5olj9kd\"", "\"google-site-verification=cQbkt6Mvv5pbamCgdFr97Muvo1mwdizd7iMwdmW6VnE\"", "\"LuDmkkjwj0SAXXZAJUwYOtzLVpviEEew0EW5BdeQuNk+64B86dL6TsvhtpzuGRtRh2azt2PBTPzwp8zLyDJMxw==\"" ], "NS": [ "ns-440.awsdns-55.com.", "ns-757.awsdns-30.net.", "ns-1878.awsdns-42.co.uk.", "ns-1234.awsdns-26.org." ], "SOA": [ "ns-757.awsdns-30.net. domainmaster.finnair.com. 1 7200 900 1209600 86400" ], "CAA": [], "DS": [], "DNSKEY": [], "RRSIG": [], "NSEC": [], "NSEC3": [], "SRV": [], "NAPTR": [], "TLSA": [], "SSHFP": [] }, "ipv4": [ "108.157.150.43", "108.157.150.4", "108.157.150.121", "108.157.150.94" ], "ipv6": [ "2600:9000:24f9:4400:10:c3f4:e780:93a1", "2600:9000:24f9:fe00:10:c3f4:e780:93a1", "2600:9000:24f9:5200:10:c3f4:e780:93a1", "2600:9000:24f9:9800:10:c3f4:e780:93a1", "2600:9000:24f9:3600:10:c3f4:e780:93a1", "2600:9000:24f9:fa00:10:c3f4:e780:93a1", "2600:9000:24f9:d800:10:c3f4:e780:93a1", "2600:9000:24f9:ba00:10:c3f4:e780:93a1" ] }, "mail": { "spf": "v=spf1 ip4:171.17.133.140/32 ip4:82.150.225.79/32 ip4:217.30.176.0/20 ip4:83.145.192.0/18 ip4:129.35.31.133/32 ip4:195.246.100.0/24 ip4:62.142.5.0/24 ip4:157.200.252.140/32 include:spf.protection.outlook.com include:_spf.salesforce.com include:cust-spf.exacttarget.com include:amazonses.com include:sendgrid.net -all", "dmarc": "v=DMARC1;p=reject;rua=mailto:awpalcqq@ag.eu.dmarcadvisor.com", "dkim_selector": "selector1", "dkim_host": "selector1._domainkey.finnair.com", "dkim": "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDxGySsPy/cBLeRVYf2lUwsLtYda+Jlh7ajWOJA6tZ/N2D/vL2WTV4fqOaGPIvGUi8t5hJ2ias1i1GhVw7VbNaIZRSZ+Rp3+wf9GJqGnB1o9PJxMKAx0o/fvrsBOz77inF/umfReazliDzk2WYQ2lMmjjVGiayPGj+vq9XY2xc3tQIDAQAB; n=1024,1455677451,1", "spf_analysis": { "valid": true, "lookups": 5, "final": "-all", "message": "Within the estimated limit" }, "dmarc_analysis": { "valid": true, "policy": "reject" }, "bimi": "", "mta_sts": "", "tls_rpt": "" }, "advanced": { "ptr": "server-108-157-150-43.mci50.r.cloudfront.net", "propagation": { "consistent": false, "results": [ { "provider": "Google", "server": "8.8.8.8", "result": [ "13.227.87.118", "13.227.87.45", "13.227.87.67", "13.227.87.82" ], "time_ms": 62.88 }, { "provider": "Cloudflare", "server": "1.1.1.1", "result": [ "13.227.87.118", "13.227.87.45", "13.227.87.67", "13.227.87.82" ], "time_ms": 60.83 }, { "provider": "Quad9", "server": "9.9.9.9", "result": [ "13.227.87.118", "13.227.87.45", "13.227.87.67", "13.227.87.82" ], "time_ms": 99.01 }, { "provider": "OpenDNS", "server": "208.67.222.222", "result": [ "13.227.87.118", "13.227.87.45", "13.227.87.67", "13.227.87.82" ], "time_ms": 180.11 }, { "provider": "AdGuard", "server": "94.140.14.14", "result": [ "108.157.150.121", "108.157.150.4", "108.157.150.43", "108.157.150.94" ], "time_ms": 76.69 } ] } }, "ssl": { "available": true, "issuer": "Amazon", "subject": "finnair.com", "valid_from": "2025-09-30T19:00:00-05:00", "valid_to": "2026-10-30T18:59:59-05:00", "days_remaining": 81, "san": [ "finnair.com" ], "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256" }, "http": { "url": "https://www.finnair.com/", "status": "HTTP/2 403 ", "http_version": "3", "headers": { "server": "AkamaiGHost", "date": "Mon, 10 Aug 2026 03:05:42 GMT", "content-length": "369", "location": "https://www.finnair.com/", "x-cache": "FunctionGeneratedResponse from cloudfront", "via": "1.1 1df1262df2a0c8e02035c15069e756c0.cloudfront.net (CloudFront)", "x-amz-cf-pop": "MCI50-P2", "alt-svc": "h3=\":443\"; ma=86400", "x-amz-cf-id": "8t5mfCaMpSLKrQs0SkYH5aK-IH2sju9DKPBjoHJPkzmou7iUce4Aqg==", "mime-version": "1.0", "content-type": "text/html", "cache-control": "max-age=0", "content-security-policy": "default-src 'self' https://cdn.finnair.com https://pay.finnair.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.finnair.com *.googletagmanager.com https://tagmanager.google.com *.google-analytics.com https://maps.googleapis.com https://googleads.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://bat.bing.com https://*.akamaihd.net https://*.go-mpulse.net https://*.quantummetric.com https://*.salesforceliveagent.com https://*.force.com https://*.salesforce.com https://*.salesforce-sites.com https://connect.facebook.net https://www.dwin1.com https://cdn.smartvel.com https://finnair.3dseatmapvr.com https://*.travelaudience.com https://*.reactandshare.com https://snap.licdn.com https://finnair.my.salesforce-sites.com https://finnair.my.site.com https://*.my.salesforce-scrt.com https://*.hotjar.com https://*.ads-twitter.com https://cdn.jsdelivr.net/npm/tesseract.js@v5.0.4/ https://cdn.jsdelivr.net/npm/tesseract.js-core@v5.0.0/ https://xsell.expedia.com; style-src 'self' 'unsafe-inline' *.finnair.com https://*.force.com https://*.salesforce.com https://*.salesforce-sites.com https://*.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://cdn.smartvel.com https://finnair.3dseatmapvr.com https://*.reactandshare.com https://finnair.my.salesforce-sites.com https://finnair.my.site.com https://*.my.salesforce-scrt.com; img-src 'self' data: *.finnair.com *.google-analytics.com https://*.ytimg.com https://*.akamaihd.net https://*.akstat.io https://www.googletagmanager.com https://maps.googleapis.com https://*.gstatic.com https://*.google.com https://www.google.fi https://www.google.se https://www.google.co.uk https://www.google.de https://www.google.es https://www.google.it https://pagead2.googlesyndication.com *.doubleclick.net https://www.googleadservices.com https://*.analytics.google.com https://www.facebook.com https://www.awin1.com https://www.dwin1.com https://cdn.smartvel.com https://bat.bing.com https://finnair.3dseatmapvr.com https://*.travelaudience.com https://*.reactandshare.com https://px.ads.linkedin.com https://*.ads-twitter.com https://*.ads-api.twitter.com https://analytics.twitter.com https://t.co https://script.hotjar.com https://play-lh.googleusercontent.com https://ade.googlesyndication.com https://cms-scdn.airtime.geemedia.com; manifest-src 'self' https://cdn.finnair.com; font-src 'self' data: https://cdn.finnair.com https://maps.googleapis.com https://*.gstatic.com https://cdn.smartvel.com https://cdn-qa.smartvel.com https://*.reactandshare.com https://script.hotjar.com; connect-src 'self' *.finnair.com https://sentry.io https://*.sentry.io https://*.akamaihd.net https://*.akstat.io https://c.go-mpulse.net https://*.force.com https://*.salesforce.com https://*.salesforce-sites.com https://search-api.swiftype.com https://finnair-app.quantummetric.com *.google-analytics.com https://pagead2.googlesyndication.com https://www.googleadservices.com *.doubleclick.net https://*.analytics.google.com https://*.googletagmanager.com https://*.google.com https://www.google.fi https://www.google.se https://www.google.co.uk https://www.google.de https://www.google.es https://www.google.it https://www.facebook.com https://green.am.apps.avarko.com https://*.aurinkomatkat.fi https://api.smartvel.com https://cdn.smartvel.com https://finnair.3dseatmapvr.com https://finnair-app-search.ent.eu-central-1.aws.cloud.es.io https://*.reactandshare.com https://cdn.linkedin.oribi.io https://px.ads.linkedin.com https://*.ads-twitter.com https://*.ads-api.twitter.com https://*.analytics.twitter.com https://finnair.my.salesforce-sites.com https://finnair.my.site.com https://*.my.salesforce-scrt.com https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com https://*.safetravel.amadeus.com https://wasm.oho.prd.icm.aero; child-src 'self' https://paygw.finnair.com https://auth.finnair.com https://www.youtube.com https://api.finnair.com https://www.facebook.com https://staticxx.facebook.com blob:; frame-src 'self' https://sst.finnair.com https://*.force.com https://*.salesforce.com https://*.my.site.com https://paygw.finnair.com https://auth.finnair.com https://www.youtube.com https://api.finnair.com https://api-dev.finnair.com https://api-test.finnair.com https://api-preprod.finnair.com https://3530909.fls.doubleclick.net https://www.googletagmanager.com https://bid.g.doubleclick.net https://td.doubleclick.net https://finnair.eu.qualtrics.com https://www.facebook.com https://*.points.com https://13389050.fls.doubleclick.net https://vars.hotjar.com https://product-router.cartrawler.com https://*.hotels.finnair.com; worker-src 'self' https://finnair.3dseatmapvr.com blob:; sandbox allow-popups allow-forms allow-scripts allow-same-origin allow-modals allow-popups-to-escape-sandbox allow-top-navigation allow-downloads; frame-ancestors 'self'; object-src 'none'; media-src https://finnair.3dseatmapvr.com https://cdn.finnair.com;", "x-xss-protection": "1; mode=block", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "set-cookie": "akaas_AB-Test=2147483647~rv=64~id=813250f8d831261f19eee08899326b5a~rn=Segment%203; path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None", "strict-transport-security": "max-age=31536000", "server-timing": "ak_p; desc=\"1786331142397_398500884_2624910153_23_13427_6_14_15\";dur=1" }, "security_checks": { "strict-transport-security": true, "content-security-policy": true, "x-content-type-options": true, "x-frame-options": true, "referrer-policy": false, "permissions-policy": false, "cross-origin-opener-policy": false, "cross-origin-embedder-policy": false, "cross-origin-resource-policy": false }, "server": "AkamaiGHost", "powered_by": "" }, "webpage": { "url": "https://www.finnair.com/", "title": "Flight bookings | select country and language | Finnair", "description": "Finnair flies between Europe, Asia and North America via Helsinki. Modern fleet - more comfort, lower emissions. Search and book your flights today.", "success": true, "error": "", "status": 206 }, "network": { "108.157.150.43": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" }, "108.157.150.4": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" }, "108.157.150.121": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" }, "108.157.150.94": { "success": false, "country": "", "region": "", "city": "", "asn": "", "organization": "", "isp": "" } }, "smtp": { "host": "finnair-com.mail.protection.outlook.com", "ports": [ { "port": 25, "open": false, "time_ms": 24.3, "banner": "", "error": "Network is unreachable" }, { "port": 465, "open": false, "time_ms": 4042.8, "banner": "", "error": "Connection timed out" }, { "port": 587, "open": false, "time_ms": 4021.2, "banner": "", "error": "Connection timed out" } ] }, "visitor": { "ip": "216.73.217.62", "reverse": "", "country": "", "country_code": "", "region": "", "city": "", "latitude": null, "longitude": null, "isp": "", "organization": "", "asn": "", "timezone": "", "browser": "Other", "os": "Other", "language": "", "user_agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)", "is_bot": true, "cloudflare": false }, "analysis_time_ms": 80.72 }