menarinidiagnostics.com

HTML metadata

Title: Home
Language: en
Canonical: /en.html

Open Graph

url: /en.html
title: Home

Technology

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (2)

cdn.cookielaw.org×1
www.googletagmanager.com×1

Social

Contact

Phone

05688870483

Registration

Registrar

Register SPA

Created

1999-04-20

Expires

2027-04-20 323 days left

Updated

2026-04-21

Name servers

ns1.register.it
ns2.register.it

DNS records live

NS

ns1.register.it
ns2.register.it

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
30 alt3.aspmx.l.google.com
30 alt4.aspmx.l.google.com

TXT

Show 4 TXT records

_y2s8hwpl0o34japz7006ruyolvkezf7
_htp7eokqrlvme613qzql3ysj0eblo6p
_gt620faeogztvtc2jkn5jz4jk8iv0hx
_q5udpaykgyfk1wg93qy3czy3nk0ndsa

Verified for

Google

Email authentication strong

SPF: v=spf1 include:_spf.google.com include:_spf.menarini.it ~all
softfail (~all)
DMARC: v=DMARC1; p=reject;
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2026-04-10 to 2026-10-26

Expires in 147 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://menarinidiagnostics.com/en.html

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://*.adobeaemcloud.com; script-src 'self' 'sha256-KuouT3yFS2nUHYSNeIuMZCuXIlksjkrS9Gj3w3wF7IE=' 'sha256-3/mNUpqF9X/gMYE+bOG6g8d6I32wdYdWwWuAk90mPCM=' 'sha256-rhw5jGhaiFkvTAbsK7cxE5kIbGUVhp/TkQ/r11PZJwM=' 'sha256-pXrUCX+em4wlA2aq7LA7N6AowyK+4EaVZFtxw254XEA=' https://googletagmanager.com https://www.googletagmanager.com https://cdn.cookielaw.org https://*.onetrust.com https://*.googleapis.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://google.com https://www.google.com https://*.gstatic.com https://gstatic.com *.adobeaemcloud.com/; object-src 'none'; font-src 'self' data: https://fonts.gstatic.com https://*.googletagmanager.com https://www.googletagmanager.com https://*.onetrust.com *.adobeaemcloud.com/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.onetrust.com *.adobeaemcloud.com/; img-src 'self' data: https://*.ytimg.com https://i.vimeocdn.com https://cdn.cookielaw.org https://*.gstatic.com ht
strict-transport-security: max-age=31536000; includeSubDomains; preload