istitutosociale.it

HTML metadata

Technology

Server

nginx

CMS

WordPress

PHP

7.4.33 end of life

jQuery

3.7.1

Analytics

• Google Tag Manager

Fonts

• Google Fonts

Third-party hosts loaded (3)

• fonts.googleapis.com×3
• www.facebook.com×1
• www.googletagmanager.com×1

Social

• instagram
• facebook

Contact

Phone

• +39011357835

DNS records live

NS

• dns103.ovh.net
• ns103.ovh.net

MX

• 1 aspmx.l.google.com
• 10 aspmx2.googlemail.com
• 10 aspmx3.googlemail.com
• 5 alt1.aspmx.l.google.com
• 5 alt2.aspmx.l.google.com

TXT

• k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCFjRenLPx1ap39uiJaDk1sSvem3Q2pTaC9NuchVXyympLfsXljhvdst9yZ+YC9o/s+ZP0BQkVfBt04XhsPmrnWUnNi/qSjwVbhciZxeEbDOrYAkEKa/1sXwWiMNzSAoW7naVT/zVUJQDvbinyO2ScTnxLx0TXEUxi4UpKPY6doTwIDAQAB
• MS=ECB7A9167D799FD7879CC6634DBEEFFD123CAD82

Verified for

• Apple
• Google

Email authentication weak

SPF

v=spf1 include:_spf.storeden.me include:_spf.google.com include:_spf.oxatis.com ~all

softfail (~all)

DMARC

not published

DKIM

• google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCFjRenLPx1ap39uiJaDk1sSvem3Q2pTaC9NuchVXyympLfsXljhvdst9yZ+YC9o/s+ZP0BQkVfBt04XhsPmr…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://istitutosociale.it/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (15)

• whatsapp.com×1
• spaggiari.eu×1
• socialesport.it×1
• piupermenodiviso.it×1
• oxatis.com×1
• mystoreden.com×1
• instagram.com×1
• gesuitieducazione.it×1
• gesuiti.it×1
• gesti.it×1
• facebook.com×1
• educatemagis.org×1
• educareinsiemeonlus.org×1
• cookiedatabase.org×1
• cefaegi.it×1

Linked from (5)

• istitutomassimo.it×1
• socialesport.it×1
• educareinsiemeonlus.org×1
• gesuitieducazione.it×1
• cyberhighschools.it×1