aifi.net

HTML metadata

Title

A.I.FI. Associazione Italiana di Fisioterapia

Description

Associazione Tecnico Scientifica per la professione del Fisioterapista inserita in elenco ministeriale e nel SNLG. Member of World Physiotherapy

Language

it-IT

Canonical

https://aifi.net/

Feeds

A.I.FI. » Feed RSS
A.I.FI. » Feed dei commenti RSS

Open Graph

url: https://aifi.net/
title: A.I.FI. Associazione Italiana di Fisioterapia
locale: it_IT
site name: A.I.FI.
description: Associazione Tecnico Scientifica per la professione del Fisioterapista inserita in elenco ministeriale e nel SNLG. Member of World Physiotherapy

Technology

Server: nginx
CMS: WordPress
jQuery: 3.7.1

Third-party hosts loaded (1)

gmpg.org×1

Social

Contact

Phone

04521221004

Registration

Registrar

OVH sas

Created

2002-06-19

Expires

2029-06-19 1112 days left

Updated

2025-10-15

Name servers

dns200.anycast.me
ns200.anycast.me

DNS records live

NS

dns200.anycast.me
ns200.anycast.me

MX

10 mail.aifi.net

Verified for

Google

Email authentication partial

SPF

v=spf1 a mx ip4:65.21.78.243 include:amazonses.com -all

strict (-all)

DMARC

v=DMARC1;p=none;pct=100;rua=mailto:synolstation@gmail.com;sp=reject;aspf=r;

policy: none (monitoring only) · sp=reject

DKIM

default: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDjvzlHoVbtFmQBr8fV1h1QtqjVqhGOLudsdXERdWs1bynEfGZ+myCNG2yPKFg32kb/8J7cRcSVuLTAvUygVLaLRAfARYAm…

selectors probed

Certificate (current)

R12

from 2026-05-19 to 2026-08-17

Expires in 75 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://aifi.net/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

weak frame protection
weak content type protection

Header values

referrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=(), accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()
x-content-type-options: nosniff, nosniff
content-security-policy: upgrade-insecure-requests;, upgrade-insecure-requests;
strict-transport-security: max-age=63072000, max-age=63072000, max-age=15768000; includeSubDomains
cross-origin-opener-policy: unsafe-none, unsafe-none
cross-origin-embedder-policy: unsafe-none; report-to='default', unsafe-none; report-to='default'
cross-origin-resource-policy: cross-origin, cross-origin