finnair.com 200
🔒 SSL Valid
HTTP Status A three-digit code showing if the site loaded successfully (200), redirects (301/302), or has errors (4xx/5xx).Read more →
200
SSL Expires When the SSL certificate expires. An expired certificate causes browser security warnings.Read more →
in 71d
Domain Expires When the domain registration expires. If not renewed, the domain becomes available to others.Read more →
in 79d
Hosting The company and location where this website's server is physically located.Read more →
AWS
Security Score based on key HTTP security headers: HSTS, Content-Security-Policy, and X-Frame-Options.Read more →
3/3
IP Address The numerical address of the server hosting this website. Reveals location, provider, and network.Read more →
18.160.10.95
Tech Stack Technologies detected on this website: CMS, frameworks, libraries, CDN, and analytics tools. 1
▼
☁️ Hosting
AWS
Screenshot 2026-08-20
▼
Captured: 2026-08-20 03:08:53 · 3.9 KB
DNS Records DNS translates domain names to IP addresses. Records control where the site, email, and services are directed.Read more →
▼
| A (IPv4) | 18.160.10.9718.160.10.9818.160.10.9518.160.10.58 |
| AAAA (IPv6) | 2600:9000:250a:b600:10:c3f4:e780:93a12600:9000:250a:3400:10:c3f4:e780:93a12600:9000:250a:4200:10:c3f4:e780:93a12600:9000:250a:4400:10:c3f4:e780:93a12600:9000:250a:7800:10:c3f4:e780:93a12600:9000:250a:1200:10:c3f4:e780:93a12600:9000:250a:ec00:10:c3f4:e780:93a12600:9000:250a:a400:10:c3f4:e780:93a1 |
| NS | ns-757.awsdns-30.netns-1234.awsdns-26.orgns-1878.awsdns-42.co.ukns-440.awsdns-55.com |
| MX | 50 finnair-com.mail.protection.outlook.com |
| TXT | v=spf1 ip4:171.17.133.140/32 ip4:82.150.225.79/32 ip4:217.30.176.0/20 ip4:83.145.192.0/18 ip4:129.35.31.133/32 ip4:195.246.100.0/24 ip4:62.142.5.0/24 ip4:157.200.252.140/32 include:spf.protection.outlook.com include:_spf.salesforce.com include:cust-spf.exacttarget.com include:amazonses.com include:sendgrid.net -all _spt4tsct9b6tb49swm6r129i5olj9kd docusign=07c89fae-b4bd-4e77-aa7b-743a235f5068 LuDmkkjwj0SAXXZAJUwYOtzLVpviEEew0EW5BdeQuNk+64B86dL6TsvhtpzuGRtRh2azt2PBTPzwp8zLyDJMxw== atlassian-domain-verification=L7NaiD3A7k0areTndY1HUx3NN3wi4df7aait5AMvaUoShwHEQjnp2DvLZfbW/q4q msfpkey=1nyi8qahaz27jjm9xncglc0iz yandex-verification: 42b7c96390d29df9 wjnyqh1w26rd7wn80b7293z9myh305y8 google-site-verification=cQbkt6Mvv5pbamCgdFr97Muvo1mwdizd7iMwdmW6VnE MS=ms21811250 dvv-domain-verification-fkop93ajs-j891eHrAa-12082025 google-site-verification=0fqRaXBWnOW_H-HRHtYttt8CRcA6HdZTWC6K5FB3P1o anthropic-domain-verification-dvzzpn=HvzeG697DEn2iCUhRJ2wFhWKD 4bwOP8__ZQCxb9yKKo_6 facebook-domain-verification=xijjs6tuf4ff2h2vh4ar3ptycto80q 00DQI00000JPWOM=1TBQI0000000673 00D24000000Zb2l=1TBQt00000002I0 h1-domain-verification=98k5uRg1nvFH7R89QtJhsQoY4rsRPCmkBDDwJfhSv4FKWSBB mentimeter-ca6617bd-7d51-495b-931c-5d098789878f |
WHOIS / RDAP Public registration data: who registered the domain, when, and when it expires.Read more →
▼
| Registrar | CSC Corporate Domains, Inc. |
| Registered | 1996-11-08 |
| Expires | 2026-11-07 (in 79 days) |
| Last Updated | 2025-11-03 |
| Status | client transfer prohibited |
SSL Certificate Encrypts the connection between browsers and this website. Valid SSL = HTTPS works.Read more → Valid
▼
| Subject (CN) | finnair.com |
| Issuer | Amazon |
| Valid From | 2025-10-01 |
| Valid Until | 2026-10-30 (71 days left) |
| SANs (1) | finnair.com |
HTTP Headers Metadata sent by the server: reveals software, caching rules, and security configuration.Read more →
▼
| Status | 200 |
| Server | N/A |
| Content-Type | text/html; charset=utf-8 |
| Final URL | https://www.finnair.com/ |
| strict-transport-security | max-age=31536000 |
| content-security-policy | default-src 'self' https://cdn.finnair.com https://pay.finnair.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.finnair.com *.googletagmanager.com https://tagmanager.google.com *.google-analytics.com https://maps.googleapis.com https://googleads.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://bat.bing.com https://*.akamaihd.net https://*.go-mpulse.net https://*.quantummetric.com https://*.salesforceliveagent.com https://*.force.com https://*.salesforce.com https://*.salesforce-sites.com https://connect.facebook.net https://www.dwin1.com https://cdn.smartvel.com https://finnair.3dseatmapvr.com https://*.travelaudience.com https://*.reactandshare.com https://snap.licdn.com https://finnair.my.salesforce-sites.com https://finnair.my.site.com https://*.my.salesforce-scrt.com https://*.hotjar.com https://*.ads-twitter.com https://cdn.jsdelivr.net/npm/[email protected]/ https://cdn.jsdelivr.net/npm/[email protected]/ https://xsell.expedia.com; style-src 'self' 'unsafe-inline' *.finnair.com https://*.force.com https://*.salesforce.com https://*.salesforce-sites.com https://*.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://cdn.smartvel.com https://finnair.3dseatmapvr.com https://*.reactandshare.com https://finnair.my.salesforce-sites.com https://finnair.my.site.com https://*.my.salesforce-scrt.com; img-src 'self' data: *.finnair.com *.google-analytics.com https://*.ytimg.com https://*.akamaihd.net https://*.akstat.io https://www.googletagmanager.com https://maps.googleapis.com https://*.gstatic.com https://*.google.com https://www.google.fi https://www.google.se https://www.google.co.uk https://www.google.de https://www.google.es https://www.google.it https://pagead2.googlesyndication.com *.doubleclick.net https://www.googleadservices.com https://*.analytics.google.com https://www.facebook.com https://www.awin1.com https://www.dwin1.com https://cdn.smartvel.com https://bat.bing.com https://finnair.3dseatmapvr.com https://*.travelaudience.com https://*.reactandshare.com https://px.ads.linkedin.com https://*.ads-twitter.com https://*.ads-api.twitter.com https://analytics.twitter.com https://t.co https://script.hotjar.com https://play-lh.googleusercontent.com https://ade.googlesyndication.com https://cms-scdn.airtime.geemedia.com; manifest-src 'self' https://cdn.finnair.com; font-src 'self' data: https://cdn.finnair.com https://maps.googleapis.com https://*.gstatic.com https://cdn.smartvel.com https://cdn-qa.smartvel.com https://*.reactandshare.com https://script.hotjar.com; connect-src 'self' *.finnair.com https://sentry.io https://*.sentry.io https://*.akamaihd.net https://*.akstat.io https://c.go-mpulse.net https://*.force.com https://*.salesforce.com https://*.salesforce-sites.com https://search-api.swiftype.com https://finnair-app.quantummetric.com *.google-analytics.com https://pagead2.googlesyndication.com https://www.googleadservices.com *.doubleclick.net https://*.analytics.google.com https://*.googletagmanager.com https://*.google.com https://www.google.fi https://www.google.se https://www.google.co.uk https://www.google.de https://www.google.es https://www.google.it https://www.facebook.com https://green.am.apps.avarko.com https://*.aurinkomatkat.fi https://api.smartvel.com https://cdn.smartvel.com https://finnair.3dseatmapvr.com https://finnair-app-search.ent.eu-central-1.aws.cloud.es.io https://*.reactandshare.com https://cdn.linkedin.oribi.io https://px.ads.linkedin.com https://*.ads-twitter.com https://*.ads-api.twitter.com https://*.analytics.twitter.com https://finnair.my.salesforce-sites.com https://finnair.my.site.com https://*.my.salesforce-scrt.com https://*.hotjar.com:* https://*.hotjar.io wss://*.hotjar.com https://*.safetravel.amadeus.com https://wasm.oho.prd.icm.aero https://browser-intake-datadoghq.eu; child-src 'self' https://paygw.finnair.com https://auth.finnair.com https://www.youtube.com https://api.finnair.com https://www.facebook.com https://staticxx.facebook.com blob:; frame-src 'self' https://sst.finnair.com https://*.force.com https://*.salesforce.com https://*.my.site.com https://paygw.finnair.com https://auth.finnair.com https://www.youtube.com https://api.finnair.com https://api-dev.finnair.com https://api-test.finnair.com https://api-preprod.finnair.com https://3530909.fls.doubleclick.net https://www.googletagmanager.com https://bid.g.doubleclick.net https://td.doubleclick.net https://finnair.eu.qualtrics.com https://www.facebook.com https://*.points.com https://13389050.fls.doubleclick.net https://vars.hotjar.com https://product-router.cartrawler.com https://*.hotels.finnair.com; worker-src 'self' https://finnair.3dseatmapvr.com blob:; sandbox allow-popups allow-forms allow-scripts allow-same-origin allow-modals allow-popups-to-escape-sandbox allow-top-navigation allow-downloads; frame-ancestors 'self'; object-src 'none'; media-src https://finnair.3dseatmapvr.com https://cdn.finnair.com; |
| x-frame-options | SAMEORIGIN |
| x-content-type-options | nosniff |
| cache-control | max-age=1425 |
Security headers HTTP headers that protect visitors from attacks. HSTS forces HTTPS, CSP controls resource loading, X-Frame-Options prevents clickjacking.Read more →
Hosting Physical infrastructure: where the server is, who operates it, and what network it belongs to.Read more →
▼
| IP Address | 18.160.10.95 |
| Provider | AWS |
| Organization | Amazon.com, Inc. |
| ASN | AS16509 |
| Country | US |
| City | Dulles Town Center |
Security Score
B (5/7)
▼
Sitemap & Robots
▼
| robots.txt | Found Blocked |
| Sitemap | Found 2 sitemaps (index) pages |
| Last modified | 2020-04-03 |
| Disallowed paths |
/*?
/pl/AYPortal/*
/*?*ENTITY=
/*?*DIALOG_KEY=
*/booking/flight-selection
*/master-en
*/master-en/*
/
*/booking/*
|
Social & Meta Tags
Missing
▼
| Title | Access Denied |
Mail Security Email authentication records (SPF & DMARC) that prevent spoofing and phishing from this domain.Read more →
▼
| SPF | ✓ Present v=spf1 ip4:171.17.133.140/32 ip4:82.150.225.79/32 ip4:217.30.176.0/20 ip4:83.145.192.0/18 ip4:129.35.31.133/32 ip4:195.246.100.0/24 ip4:62.142.5.0/24 ip4:157.200.252.140/32 include:spf.protection.outlook.com include:_spf.salesforce.com include:cust-spf.exacttarget.com include:amazonses.com include:sendgrid.net -all |
| DMARC | ✓ Present v=DMARC1;p=reject;rua=mailto:[email protected] |
| MX Records | 50 → finnair-com.mail.protection.outlook.com |