casadicura-villabianca.it

HTML metadata

Technology

Server

nginx

jQuery

1.11.1 known XSS (<3.5)

Fonts

• Google Fonts

Third-party hosts loaded (3)

• fonts.googleapis.com×2
• ajax.googleapis.com×1
• www.acti-web.org×1

Social

• facebook

Contact

Email

• info@casadicura-villabianca.it
• odv@casadicura-villabianca.it
• info@casadicura-villabianca.ittelefono

DNS records live

NS

• cl-139.noamweb.com
• cl-139.noamweb.net

MX

• 10 mail.casadicura-villabianca.it

TXT

• gh55bdggcca9328ol4hi5rvull
• actalis-dv=LpDE97ttZ5hb8q48qXkerpS

Email authentication strong

SPF

v=spf1 +a +mx +a:cl-139.noamweb.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:info@acti-web.com; pct=100; ruf=mailto:info@acti-web.com; fo=0:d:s; aspf=r; adkim=r;

policy: reject (enforced)

DKIM

• default: v=DKIM1; k=rsa; p=MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAizyYo6mwLRpsG4aLXkDJJA/I7nf2vG9QqWJnUu++uQrZgca+gld0ljkWerJL63OnQM4yUy2CR6RVDa…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://casadicura-villabianca.it/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (6)

• miodottore.it×1
• facebook.com×1
• arsota.it×1
• anik.it×1
• acti-web.com×1
• acopnazionale.it×1

Linked from (1)

• elios-suite.it×1