menarinidiagnostics.at
HTML metadata
Technology
- Analytics
-
- Google Tag Manager
- Cookie consent
-
- OneTrust
Third-party hosts loaded (2)
- cdn.cookielaw.org×1
- www.googletagmanager.com×1
Social
Contact
DNS records live
- NS
-
- ns1.register.it
- ns2.register.it
- TXT
-
Show 6 TXT records
7gp2j8yl9fpdfk10cgj05vx6vd53xbmj_5l3ax6p9qpmmbsnirwntg9vyhmncbqy_huyjp9rx09cfi458nbkpexy0z1920h6tq650xypf4p80txnzqrm14cqwmx6zdlm_s4ump1saq3xvo29fy6zeycqfv7ew5ej_lvwwv2nqnk38s6biv4igl2q6l6gz0op
- Verified for
-
- Microsoft 365
Email authentication no MX
- SPF
-
v=spf1 include:_spf.google.com include:_spf.menarini.it ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=reject;policy: reject (enforced) - DKIM
- no key found at common selectors
Certificate (current)
DigiCert Global G2 TLS RSA SHA256 2020 CA1
Expires in 147 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- weak frame protection
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN, SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' https://*.adobeaemcloud.com; script-src 'self' 'sha256-VYvBMiLYdfUNlFiWKEy1Tjm9vZnv69hGb2QQFULHzrc=' 'sha256-KuouT3yFS2nUHYSNeIuMZCuXIlksjkrS9Gj3w3wF7IE=' 'sha256-3/mNUpqF9X/gMYE+bOG6g8d6I32wdYdWwWuAk90mPCM=' 'sha256-NOnsValoqAUv872T5QeSoB1qp8ysDTdk5W4xXOTrA7I=' https://googletagmanager.com https://www.googletagmanager.com https://cdn.cookielaw.org https://*.onetrust.com https://*.googleapis.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://google.com https://www.google.com https://*.gstatic.com https://gstatic.com *.adobeaemcloud.com/; object-src 'none'; font-src 'self' data: https://fonts.gstatic.com https://*.googletagmanager.com https://www.googletagmanager.com https://*.onetrust.com *.adobeaemcloud.com/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.onetrust.com *.adobeaemcloud.com/; img-src 'self' data: https://*.ytimg.com https://i.vimeocdn.com https://cdn.cookielaw.org https://*.gstatic.com ht- strict-transport-security
max-age=31536000; includeSubDomains; preload