starsoftware.it

HTML metadata

Technology

Server

Apache

CMS

WordPress 5.7.15 legacy (latest 7.0)

jQuery

1.12.4 known XSS (<3.5)

Analytics

• Google Tag Manager

Third-party hosts loaded (6)

• www.google.com×2
• gmpg.org×1
• s.w.org×1
• tvox.seon.it×1
• w.sharethis.com×1
• www.googletagmanager.com×1

Social

• twitter
• facebook
• linkedin

DNS records live

NS

• dns1.starsoftware.it
• dns2.starsoftware.it

MX

• 10 nehos.in.tmes.trendmicro.eu

TXT

• MS=0FAD90B82E1063476D2525691EA8BCD70BE579EE
• tmes=7a1e6e82a68cd5e0df9edd26ea44160f

Verified for

• Google

Email authentication weak

SPF

v=spf1 a +include:_spf.ns3.it mx +include:spf.tmes.trendmicro.com ip4:52.144.72.106 ip4:78.26.127.53 ip4:78.26.127.61 ip4:213.187.10.230 ip4:213.187.10.112 include:spf.mandrillapp.com include:sparkpostmail.com include:spf.hes.trendmicro.com ~all

softfail (~all)

DMARC

not published

DKIM

• default: v=DKIM1, h=sha256, k=rsa, p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAgL9suGRMJ56uuHb1wtYKSCGlm3/w5kd6mRZXPUG0T1d/IVjvgHZgk/xidjp4zdzrL0…

selectors probed

Certificate (current)

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.starsoftware.it/

findings

• missing HSTS
• missing Content Security Policy
• missing frame protection
• missing content type protection
• missing Referrer Policy
• missing Permissions Policy

Links to (6)

• cylix.it×1
• dinamiza.it×1
• facebook.com×1
• linkedin.com×1
• seon.it×1
• twitter.com×1

Linked from (1)

• trevisobasket.it×1