onemarkets.it
HTML metadata
Technology
Third-party hosts loaded (1)
- code.etracker.com×1
Social
Contact
- Phone
DNS records live
- NS
-
- a1-65.akam.net
- a11-66.akam.net
- a13-67.akam.net
- a22-64.akam.net
- a28-65.akam.net
- a6-66.akam.net
- TXT
-
Show 8 TXT records
actalis-dcv=86g13f7fv065dmct8lonqga9boactalis-dcv=abqd37i8p4ggsgrb6fmh8ad3q4actalis-dcv=bt4ubb96huc81a48g960203d0eactalis-dcv=alipvnqjugf80ej2jdsna9god5actalis-dcv=5lrvrjl6k2b05gt9odj717l5rractalis-dcv=cj59d28ia3kjtj8cuoq71d77dactalis-dcv=3k7f3167bdt45b4ulrt6jp7n2gactalis-dcv=5g3q5p0779kkbapht5155bvaof
Email authentication no MX
- SPF
- not published
- DMARC
-
v=DMARC1; p=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.compolicy: reject (enforced) - DKIM
- no key found at common selectors
Certificate (current)
Actalis Organization Validated Server CA G3
Expires in 278 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- missing Permissions Policy
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'self' https://www.investimenti.unicredit.it https://newapp.etracker.com ; frame-src 'self' https://www.youtube.com https://push2.investimenti.unicredit.it https://push2.onemarkets.it https://www.google.com https://maps.google.com https://multimedia.unicredit.eu https://login.microsoftonline.com ; child-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.etracker.com https://www.etracker.de https://code.etracker.com https://e.video-cdn.net https://www.google.com https://www.gstatic.com https://cdn.jsdelivr.net ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://static.etracker.com https://www.etracker.de https://code.etracker.com https://e.video-cdn.net https://www.google.com https://www.gstatic.com https://cdn.jsdelivr.net ;- strict-transport-security
max-age=31536000; includeSubDomains; preload
Links to (8)
- youtube.com×1
- webank.it×1
- unicreditgroup.eu×1
- unicredit.it×1
- sella.it×1
- milanofinanza.it×1
- fineco.it×1
- directa.it×1