universalmusic.it
HTML metadata
Technology
- Server
- nginx
- CMS
- Gatsby
- Cookie consent
-
- Cookiebot
- Fonts
-
- Adobe Fonts
Third-party hosts loaded (3)
- img.youtube.com×14
- consent.cookiebot.com×1
- use.typekit.net×1
Social
Contact
- Phone
DNS records live
- NS
-
- ns1.register.it
- ns2.register.it
- MX
-
- 10 mxrbl.dominonetwork.net
- 15 mx02rbl.dominonetwork.net
- TXT
-
Show 7 TXT records
globalsign-domain-verification=66AE553759DE2AA93FDA99D80426687Cglobalsign-domain-verification=BD902A7BF51EC7B9BA80923232CA4B9Dglobalsign-domain-verification=28D6F3092B707DEDDDFA9847B75C64CAfacebook-domain-verification=8gj1o20ln9pvtxftj1yhj13akmpsp2globalsign-domain-verification=9F46A11B1056D99414CC96FB351878CEglobalsign-domain-verification=613A80437E7274B6C0CC14697A51D394google-site-verification=v3ussHeAnCH4Ya_xWPN3wYEfsLW9StsNmqD_14K6xqU
Email authentication weak
- SPF
-
v=spf1 ip4:62.116.169.190 ip4:185.221.173.18 ip4:45.60.76.126 include:spf.webapps.net include:_spf-send.domino.it ~allsoftfail (~all) - DMARC
- not published
- DKIM
-
- s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvpr0Ypq09crKwWQUoxB7e8LKlV04HTa+tazGwKQJkzAc2ri4lS2tHO9LI6+AtJE31HU++Wn9uNAKEouz4… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7ok3pFLpD6r+wma4aCJjfAOdsScOxGWHI7d6RvZGo8tGOK3RkCZGb8tkyFUVI1NMjJU82RCy0PSZCdh01…
selectors probed - s1:
Certificate (current)
Sectigo Public Server Authentication CA DV R36
Expires in 16 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- findings
-
- CSP uses wildcard sources
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- content-security-policy
connect-src *.universalmusic.it *.cookiebot.com www.googletagmanager.com www.google.com *.stape.net *.googlesyndication.com *.google-analytics.com;- strict-transport-security
max-age=31536000