konditoriaph7.fi

Technology

Server

nginx

CMS

Gatsby

Third-party hosts loaded (1)

• cdn.ravenjs.com×2

Registration

Created

2007-08-13

Name servers

• ns-se.elisa.net [ok]
• ns-fi.elisa.net [ok]

DNS records live

NS

• ns-fi.elisa.net
• ns-se.elisa.net

MX

• 0 konditoriaph7-fi.mail.protection.outlook.com

Verified for

• Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:185.11.208.37 include:spf.protection.outlook.com include:spf.lianamailer.com include:spf.welcomnet.fi ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:641af56fc0f8a@ag.dmarcly.com; ruf=mailto:641af56fc0f8a@fo.dmarcly.com; sp=quarantine; fo=1;

policy: quarantine · sp=quarantine

DKIM

• selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCRnS8zV2IDDTJ8Ubm/WVlOqvxEgVov9e40bntdgBWih0KTyQZPyKZXNac7I4cxrosbsQXzDFumWhfJQ3WZqV…
• selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uvwAs/nxcTM8wJtMZocfUIIrTRBSVkgpRrDL9mGA8Ph+fVBnOAb0s7ud85tSOwy9Gn7mMa8ofWZRY…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.konditoriaph7.fi/

present

• strict-transport-security
• content-security-policy
• x-frame-options
• x-content-type-options
• referrer-policy

findings

• CSP allows unsafe inline scripts/styles
• CSP uses wildcard sources
• missing Permissions Policy

Linked from (1)

• taitaja.fi×1