kicks.fi

HTML metadata

Technology

CDN

Cloudflare

jQuery

3.4.1 known XSS (<3.5)

Analytics

• Google Tag Manager

Third-party hosts loaded (6)

• images.matas.dk×25
• images.eu.ctfassets.net×8
• cdnjs.cloudflare.com×4
• damcache-prd.matas.dk×2
• track.matas.dk×2
• www.googletagmanager.com×1

Social

• youtube
• instagram
• facebook
• tiktok

Contact

Phone

• 09-348 93 31

Registration

Created

2011-08-24

Name servers

• sofia.ns.cloudflare.com [ok]
• darl.ns.cloudflare.com [ok]

DNS records live

NS

• darl.ns.cloudflare.com
• sofia.ns.cloudflare.com

MX

• 0 matas.in.tmes.trendmicro.eu

TXT

Show 7 TXT records

• _ts7kwdrhmbw5vwgwd5g0opnznl0nol7
• 939jvz5jf6xptxrtm4mn5f6txb7r4h1w
• ms=MS13172915
• 27zy69gy57YpLLh5DPu7zw93/RKmBJqJJ0m8aQmy3iuUs1POWzvNXThytguAGfEdBlf/PFCFZEhbc8AYLjsijw==
• _4tums68rquc16huj5n7i4okyw52ipya
• +L6SH9ylbBYcVscxmrzL9B5YcVvbiEMtSKL/FD7ocLUpL82JSxmYhXxIt7/GWJ7Ts8TMNq4v3LcMUGjnWcQ9Xg==
• trend-micro-v1-domain-verification.2e5cdae683dd8784701bbfca965fde3a=dd3ade6b-225e-4e9a-9eca-6ad8e73f5864

Verified for

• Adobe
• Atlassian
• GlobalSign
• Google
• Meta
• Microsoft 365
• OpenAI

Email authentication strong

SPF

v=spf1 include:spf.axstores.se include:spf.protection.outlook.com include:_spf.cention.com include:mail.zendesk.com include:sendgrid.net ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:ifmmfot5@ag.eu.dmarcadvisor.com;

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

• google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmsEk/j5wBG+FoTcCEaraHYIPZhs8r2ZDTKoTTCkGOsjptNoLp9gSdoCeYXFTMu+YxdlUuo01/r9ec…
• selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwE7PfWAfhaV2PN2E2uFPhVWh/U2ATZwpw6FqWiPvHX3a4n+0f6Bou7fBFlS3i86EDN+aaM8HvhZQT…
• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu7PXZasvzFtMX1jqNCn6K9coww4ytogKd5/98AItb3K3EZlg9543fl0el1d/PzgB0R9Js3ju/ZWa5SdW3…
• s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZxAF/+HZjW76sc/sPKnXN49h0E1N+frDvJydLxIZKlk59Om/H0atIcCH1H19vDRZLlvojodDLLxe4M+JCKG5NpY…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.kicks.fi/

present

• strict-transport-security
• x-frame-options
• x-content-type-options

findings

• missing Content Security Policy
• missing Referrer Policy
• missing Permissions Policy

Links to (8)

• youtube.com×1
• whistleb.com×1
• tiktok.com×1
• matasgroup.com×1
• instagram.com×1
• google.com×1
• facebook.com×1
• apple.com×1

Linked from (2)

• matasgroup.com×1
• matas.dk×1