ciromarchetti.com

HTML metadata

Technology

Server

Pepyaka

CMS

Wix

Third-party hosts loaded (4)

• static.parastorage.com×15
• siteassets.parastorage.com×4
• static.wixstatic.com×2
• browser.sentry-cdn.com×1

DNS records live

NS

• ns4.wixdns.net
• ns5.wixdns.net

MX

• 10 aspmx.l.google.com
• 20 alt1.aspmx.l.google.com
• 30 alt2.aspmx.l.google.com
• 40 aspmx2.googlemail.com
• 50 aspmx3.googlemail.com

TXT

• google-site-verification=Lc-uJN-Gpo-JcMCD4U_wMaZWWwj6xxhNEC5UPp-uMD4

Email authentication partial

SPF

v=spf1 include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc_agg@vali.email

policy: none (monitoring only)

DKIM

• s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1SSGCd/jUKtgl5eygAOM07K1VPpilPQIqtQynwmEMq22D5fsq5wwttBq8iixIirQcIR2WPA41mhIyJjaC…
• s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHbukziCKkf9cNUDd+8ZtXhYmjqHM6iaHiF0nbNXbUdt/O+r3rQhD2sEkAOC55iP+p7+XuykdNQskryqK7oTCBmf…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://www.ciromarchetti.com/

present

• strict-transport-security
• x-content-type-options

findings

• missing Content Security Policy
• missing frame protection
• missing Referrer Policy
• missing Permissions Policy

Linked from (1)

• thetarotreview.com×1