indexo.dev

odcec.mi.it

.it crawl

First seen 2026-05-25 · Last seen 2026-05-31 · ok HTTP/1.1 200 8008 ms crawled 2026-05-29

IT · 46.254.34.28 · AS52030 Server Plan S.r.l.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Ordine dei Commercialisti e degli Esperti Contabili di Milano
Description
Ordine dei Dottori Commercialisti e degli Esperti Contabili di Milano. Informazioni su attività, convegni, sportelli, aggiornamenti e news dall'ODCEC Milano.
Language
it
Generator
Sitefinity 13.3.7639.0 PE
Canonical
https://www.odcec.mi.it

Open Graph

url
https://www.odcec.mi.it
title
Ordine dei Commercialisti e degli Esperti Contabili di Milano
site name
ODCEC Milano
description
Ordine dei Dottori Commercialisti e degli Esperti Contabili di Milano. Informazioni su attività, convegni, sportelli, aggiornamenti e news dall'ODCEC Milano.

Technology

Server
Microsoft-IIS
ASP.NET
4.0.30319
Analytics
  • Google Tag Manager
Cookie consent
  • Cookiebot

Third-party hosts loaded (4)

  • www.googletagmanager.com×2
  • consent.cookiebot.com×1
  • kit.fontawesome.com×1
  • www.facebook.com×1

Contact

Phone

DNS records live

NS
  • ns1.register.it
  • ns2.register.it
MX
  • 10 odcec-mi-it.mail.protection.outlook.com
TXT
  • 8f18rivnav303k9gidt01h201k
  • eisimg68v3m6pp7aco1ghif3e
  • np7q3cnl6hg6vgoshr5umptqlc
Verified for
  • Microsoft 365

Email authentication partial

SPF
v=spf1 ip4:194.242.61.0/24 ip4:89.31.72.0/21 ip4:151.11.52.0/23 ip4:151.1.172.0/24 ip4:185.5.208.0/22 ip4:151.11.48.0/22 ip4:212.54.224.0/21 include:turbo-smtp.com include:spf.protection.outlook.com -all
strict (-all)
DMARC
v=DMARC1; p=none; rua=mailto:dmarc-rua@odcec.mi.it,mailto:postmaster@odcec.mi.it; ruf=mailto:dmarc-ruf@odcec.mi.it; fo=1; adkim=r; aspf=r; pct=100; sp=none; ri=86400
policy: none (monitoring only) · sp=none
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtH/vaU8lPsJWLi2HgnM6upAAuAGYTU+jct2pv0TCmJkbfNVWdlp+BiflEETc7WxnpaS8m+60u/VGWk8uXgt…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIJapXA1qDPtprP7gPx/GJLDV9QU3+nPXQKaIVgh9MncHUWp1asCNRVaBpoj/kwBO6Vvnqlx6l4eVW…
selectors probed

Certificate (current)

R13
from 2026-05-04 to 2026-08-02
Expires in 62 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.odcec.mi.it/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
no-referrer-when-downgrade
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' unpkg.com *.cookiebot.com *.fontawesome.com *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org *.googletagmanager.com *.hotjar.com *.googleadservices.com googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' *.fontawesome.com *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com https://cdn.insight.sitefinity.com https://dec.azureedge.net platform.twitter.com/css/ *.twimg.com; font-src 'self' *.fontawesome.com fonts.gstatic.com
strict-transport-security
max-age=31536000; includeSubDomains

Links to (5)

Linked from (2)