itacaconsulting.it

HTML metadata

Technology

Server

Microsoft-IIS

ASP.NET

4.0.30319

jQuery

1.11.2 known XSS (<3.5)

Analytics

• Google Tag Manager

Cookie consent

• Cookiebot

Fonts

• Google Fonts

Third-party hosts loaded (3)

• consent.cookiebot.com×1
• fonts.googleapis.com×1
• www.googletagmanager.com×1

Contact

Phone

• 05146950968

DNS records live

NS

• dns.widhost.net
• dns2.widhost.net

MX

• 10 itacaconsulting-it.mail.protection.outlook.com

Verified for

• Meta

Email authentication partial

SPF

v=spf1 a:52.18.143.123 include:spf.protection.outlook.com include:_spf.arubabusiness.it include:mailer.fatturecloud.it -all

strict (-all)

DMARC

v=DMARC1; p=none; sp=none; adkim=r; aspf=r

policy: none (monitoring only) · sp=none

DKIM

• selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDdJkMlS1j4fxVTheoH+6s5SUWd0rjnv6Da6e14fQfuFZARtC0I0KYqVtUNXawejp1pwQ8GXQr1DN3aQz1y7x…
• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://itacaconsulting.it/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (8)

• varbox.it×1
• panoply.it×1
• nesea.net×1
• myguitarshow.com×1
• mastonim.com×1
• cpm.it×1
• ballin-shoes.it×1
• backline.it×1

Linked from (4)

• mastonim.com×1
• panoply.it×1
• nesea.net×1
• qusemo.com×1