bocconialumni.it

HTML metadata

Title: Bocconi Alumni Community

Technology

Server: Apache
CMS: Joomla
jQuery: 3.7.1
Stack: Java

Analytics

Google Tag Manager

Cookie consent

Iubenda

Third-party hosts loaded (4)

d1isiraqqs4dm.cloudfront.net×72
cdn.iubenda.com×1
www.facebook.com×1
www.googletagmanager.com×1

Social

Contact

Phone

DNS records live

NS

ns1.garr.net
ns1.unibocconi.it
ns2.unibocconi.it

MX

10 bocconialumni-it.mail.protection.outlook.com

TXT

_lt3il9xtj2i6qlkt73300w6ai56qy11

Verified for

Google
HARICA

Email authentication strong

SPF

v=spf1 include:spf.unibocconi.it include:spf.protection.outlook.com include:cust-spf.exacttarget.com include:mail.zendesk.com include:musvc.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; rua=mailto:qz87vt1f@ag.eu.dmarcadvisor.com,mailto:dmarc-rua@bocconialumni.it; ruf=mailto:dmarc-ruf@bocconialumni.it

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WMYpsvDY3LzguiOCI/BpkYk9oM5AAiDIlvhkl8LIBfxEGufyoyU1OgH1KNdB1bq+4bNmhn0TnrIhP…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqp5n2quAw89Z10iBJ5pMwZxaa7NQPOf+H0xEBm+APIC4BWdI39+ir0p7fdaZHVbJWvw83lrSKUuMu…

selectors probed

Certificate (current)

GEANT TLS RSA 1

from 2025-06-23 to 2026-06-23

Expires in 22 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.bocconialumni.it/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: media-src 'self' blob: *; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google.com *.googletagmanager.com d1isiraqqs4dm.cloudfront.net *.iubenda.com *.facebook.net *.google-analytics.com *.facebook.com; script-src-elem 'self' 'unsafe-inline' *.googleapis.com apis.google.com d1isiraqqs4dm.cloudfront.net *.facebook.net *.iubenda.com *.googletagmanager.com *.google-analytics.com *.facebook.com *.vimeo.com *.spreaker.com; style-src 'self' 'unsafe-inline' *.googleapis.com d1isiraqqs4dm.cloudfront.net; img-src 'self' blob: data: d1isiraqqs4dm.cloudfront.net *.facebook.com *.google-analytics.com *.doubleclick.net *.vimeocdn.com *.googletagmanager.com *.unibocconi.it *.unibocconi.cloud; font-src 'self' data: *.googleapis.com *.gstatic.com d1isiraqqs4dm.cloudfront.net; connect-src 'self' *.iubenda.com *.google-analytics.com stats.g.doubleclick.net *.unibocconi.it *.unibocconi.cloud *.facebook.com d1isiraqqs4dm.cloudfront.net; object-src 'none'; frame
strict-transport-security: max-age=63072000