spettacolidimistero.it

HTML metadata

Technology

Server

Apache

CMS

WordPress 5.7.2 legacy (latest 7.0)

jQuery

3.5.1

Cookie consent

• Iubenda

Third-party hosts loaded (3)

• d3q20p2fpk1q45.cloudfront.net×6
• cdn.iubenda.com×1
• gmpg.org×1

Social

• facebook
• twitter
• youtube

DNS records live

NS

• ns1.dnsitalia.net
• ns2.dnsitalia.net
• nsct.dnsitalia.net
• nsrm.dnsitalia.net

MX

• 5 mail.websolution.it

Email authentication partial

SPF

v=spf1 include:spf.mandrillapp.com a mx +a:smtp.websolution.it +a:mailer.websolution.it ~all

softfail (~all)

DMARC

v=DMARC1; p=none; pct=2; aspf=r

policy: none (monitoring only) · pct=2

DKIM

• default: v=DKIM1; k=rsa; n=1024; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD+lxmUC0Snxmgp3clq/0QZwiiJBvDLMHy3SkDsApqOxt58fVlTl2VYu9gKVC85uwflhAEQJ0camz…
• k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.spettacolidimistero.it/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (5)

• youtube.com×1
• websolution.it×1
• veneto.eu×1
• twitter.com×1
• facebook.com×1

Linked from (1)

• unplivenezia.it×1