akkilahdot.fi

HTML metadata

Technology

Server

nginx

CMS

Gatsby

jQuery

2.2.3 known XSS (<3.5)

Analytics

• Google Tag Manager
• Plausible

Ads

• Google Ads (DoubleClick)

Third-party hosts loaded (6)

• ajax.googleapis.com×1
• plausible.io×1
• securepubads.g.doubleclick.net×1
• tuktukmedia-cdn.relevant-digital.com×1
• www.google.com×1
• www.googletagmanager.com×1

Social

• facebook
• tiktok

DNS records live

NS

• jim.ns.cloudflare.com
• tori.ns.cloudflare.com

MX

• 1 aspmx.l.google.com
• 10 alt3.aspmx.l.google.com
• 10 alt4.aspmx.l.google.com
• 5 alt1.aspmx.l.google.com
• 5 alt2.aspmx.l.google.com

TXT

• mailerlite-domain-verification=d74c3e1e6d0dfd60dfeb8052dac38a5d2e74af1c

Email authentication partial

SPF

v=spf1 a mx include:_spf.mlsend.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none

policy: none (monitoring only)

DKIM

• google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zEZqnibpTTAxdvf10yDLW76DyTFX+tKilGLllEJHbRWHu8YJE/wHG6FP01AzLrx+enjS/Ed5WWuq2…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.akkilahdot.fi/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (12)

• tiktok.com×1
• storbyferie.no×1
• sistaminuten.se×1
• restplass.no×1
• reisegiganten.no×1
• rantapallo.fi×1
• napsu.fi×1
• microsoft.com×1
• facebook.com×1
• dinreise.no×1
• destination.se×1
• afbudsrejser.dk×1

Linked from (8)

• dinreise.no×1
• napsu.fi×1
• storbyferie.no×1
• sistaminuten.se×1
• destination.se×1
• reisegiganten.no×1
• afbudsrejser.dk×1
• restplass.no×1