skicarosello.it

HTML metadata

Technology

Server

Apache

jQuery

3.3.1 known XSS (<3.5)

Analytics

• Google Tag Manager

Cookie consent

• Iubenda

Third-party hosts loaded (2)

• cdn.iubenda.com×1
• www.googletagmanager.com×1

Contact

Phone

• 01107880211

DNS records live

NS

• dns.raiffeisen.net
• dns2.raiffeisen.net

MX

• 10 skicarosello-it.mail.protection.outlook.com

Verified for

• Apple
• Microsoft 365

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com +a +ip4:193.70.146.157/24 include:_spf.aitec.it -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

• selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNrNVf/f45AGLiL53dQC/4utahj+bsb37V+huUCHfbJqErmZPtm0UAdyypXxBG3InbYpW1YwIN9L5L1VkCe0…
• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://skicarosello.it/it/consorzio-skicarosello-alta-badia-dolomiti.php

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (8)

• synnova.it×1
• suedtirol.info×1
• residencevallon.it×1
• moviment.it×1
• interagendo.it×1
• dolomitisuperski.com×1
• audi.it×1
• altabadia.org×1

Linked from (2)

• skiteamaltabadia.it×1
• moviment.it×1