mikkeli.fi

HTML metadata

Technology

CDN

Cloudflare

CMS

WordPress

jQuery

1.12.4 known XSS (<3.5)

Analytics

• Google Tag Manager

Fonts

• Adobe Fonts
• Google Fonts

Social

• facebook
• instagram
• linkedin
• youtube

Contact

Phone

• 015 194 2100

Registration

Created

1990-12-31

Name servers

• ns2.z.fi [ok]
• ns2.meita.fi [62.148.110.42] [ok]
• ns1.z.fi [ok]
• ns.meita.fi [62.148.110.41] [ok]

DNS records live

NS

• ns.meita.fi
• ns1.z.fi
• ns2.meita.fi
• ns2.z.fi

MX

• 0 mikkeli-fi.mail.eo.outlook.com

TXT

• Meidan IT ja talous Oy

Verified for

• Google

Email authentication weak

SPF

v=spf1 include:spf.protection.outlook.com include:spf.palvelukanava.fi include:servers.mcsv.net include:mail.webropolsurveys.com include:_spf.datacenter.fi include:_netblocks.mikkeli.fi a:mail.bonsait.fi a:mailservice.bonsait.fi -all

strict (-all)

DMARC

not published

DKIM

• selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDO55PmFioLvAyveuskWOvuugly2cgsJIZWaX1NmU4XWug3KtC+aOte/sjHrJEvT+NMp4/auxMUROPiuKxQGO…
• k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://mikkeli.fi/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (10)

• youtube.com×1
• readspeaker.com×1
• linkedin.com×1
• kuntarekry.fi×1
• kuntalaisaloite.fi×1
• instagram.com×1
• facebook.com×1
• demokratia.fi×1
• cloudnc.fi×1
• asiointi.fi×1

Linked from (4)

• kuvittajat.fi×1
• haaja.com×1
• groteski.fi×1
• savitaipale.fi×1