vilmorinmikado.it

.it crawl

First seen 2026-05-12 · Last seen 2026-05-18 · ok HTTP/1.1 200 799 ms crawled 2026-05-18

FR · 51.38.180.55 · AS16276 OVH SAS

Reputation 92/100 no dmarc policy

sector food type homepage

HTML metadata

Title

Vilmorin-Mikado Italia | Vilmorin-Mikado Italia | SEMENTI ORTICOLE

Language

Generator

Drupal 11 (https://www.drupal.org)

Canonical

https://www.vilmorinmikado.it/

Translations

Technology

Server: Apache
CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (4)

static.addtoany.com×1
www.facebook.com×1
www.google.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

dns1.cscdns.net
dns2.cscdns.net

MX

10 smtp1.speednames.com
20 smtp2.speednames.com

TXT

google-site-verification=tgG3_zPch1G7VXmYhAQLIq1EhynoFwgz6P71AWiu5lM

Email authentication weak

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-05-07 to 2026-08-05

Expires in 78 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.vilmorinmikado.it/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), camera=(), microphone=(), fullscreen=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self' data:; script-src 'self' https://www.googletagmanager.com/ 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https://googleads.g.doubleclick.net/ https://www.youtube.com/ https://www.gstatic.com/firebasejs/ https://mc.yandex.ru/metrika/watch.js https://connect.facebook.net/en_US/fbevents.js https://www.recaptcha.net/recaptcha/api.js https://www.googletagmanager.com/ https://cdn.jsdelivr.net/ https://static.addtoany.com https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com/ mktdplp102cdn.azureedge.net/public/latest/js/ws-tracking.js mktdplp102cdn.azureedge.net/public/latest/js/form-loader.js http://www.google-analytics.com/analytics.js; script-src-attr 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net/ https://stackpath.bootstrapcdn.com; style-src-elem 'self' 'unsafe-inline' https://cdn.jsdelivr.net/ https://stackpath.bootstra
strict-transport-security: max-age=31536000; includeSubDomains; preload