fikuro.fi

HTML metadata

Technology

CDN

Cloudflare

CMS

Joomla

jQuery

1.7.1 known XSS (<3.5)

Analytics

• Google Tag Manager

Third-party hosts loaded (1)

• www.googletagmanager.com×1

Social

• youtube
• linkedin
• facebook

Contact

Phone

• +358942562230

Registration

Created

2017-10-17

Name servers

• dns1.vismadns.com [ok]
• dns4.vismadns.com [ok]
• dns3.vismadns.com [ok]
• dns2.vismadns.com [ok]

DNS records live

NS

• dns1.vismadns.com
• dns2.vismadns.com
• dns3.vismadns.com
• dns4.vismadns.com

MX

• 1 aspmx.l.google.com
• 10 alt3.aspmx.l.google.com
• 10 alt4.aspmx.l.google.com
• 5 alt1.aspmx.l.google.com
• 5 alt2.aspmx.l.google.com

Verified for

• Google
• Microsoft 365

Email authentication weak

SPF

v=spf1 include:spf.protection.outlook.com include:_spf.google.com -all

strict (-all)

DMARC

not published

DKIM

• google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUF00e6qJOq5TbfGKgeqK5F1j+D/Zlr9OiTH+fFZXGVBFrmYnArDi7vesVo5IO8gRjXDYJiJJAesKX…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.fikuro.fi/

present

• strict-transport-security
• content-security-policy
• referrer-policy

findings

• missing frame protection
• missing content type protection
• missing Permissions Policy

Links to (11)

• youtube.com×1
• youtu.be×1
• vismapay.fi×1
• visma.fi×1
• visma.com×1
• verkkolaskut.fi×1
• passeli.fi×1
• ows.fi×1
• linkedin.com×1
• facebook.com×1
• digitalbooker.com×1

Linked from (5)

• verkkolaskut.fi×1
• ows.fi×1
• digitalbooker.com×1
• vismapay.fi×1
• passeli.fi×1