sback.it

HTML metadata

Technology

Server

nginx

DNS records live

NS

• ns1.siteground.net
• ns2.siteground.net

MX

• 1 aspmx.l.google.com
• 10 alt3.aspmx.l.google.com
• 10 alt4.aspmx.l.google.com
• 5 alt1.aspmx.l.google.com
• 5 alt2.aspmx.l.google.com

Email authentication partial

SPF

v=spf1 +a +mx +a:es36.siteground.eu include:sback.it.spf.auto.dnssmarthost.net ~all

softfail (~all)

DMARC

v=DMARC1; p=none; aspf=r; adkim=r;

policy: none (monitoring only)

DKIM

• default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uz0hx9QbgzHfKBC4LoGGPtS/krxAfL1WISHFwvBCxLd1YlOU7Mx0FJIvv6LWRBE7eujTaq+WrL4zi…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://sback.it/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (8)

• uzh.ch×2
• usi.ch×2
• unibo.it×2
• ulb.ac.be×2
• microsoft.com×2
• impressioni.bo.it×2
• cineca.it×2
• cabird.com×2

Linked from (1)

• neverworkintheory.org×2