vulcano.agency
HTML metadata
Technology
- Server
- nginx
- CMS
- Next.js
- Analytics
-
- Google Tag Manager
- Cookie consent
-
- Iubenda
Third-party hosts loaded (4)
- www.vulcano.agency×23
- res.cloudinary.com×4
- cdn.iubenda.com×2
- www.googletagmanager.com×1
Social
Registration
- Registrar
- OVH SAS
- Created
- 2018-03-09
- Expires
- 2030-03-09 1389 days left
- Updated
- 2022-08-17
- Name servers
-
- dns10.ovh.net
- ns10.ovh.net
DNS records live
- NS
-
- dns10.ovh.net
- ns10.ovh.net
- MX
-
- 0 vulcano-agency.mail.protection.outlook.com
- TXT
-
Show 6 TXT records
google-site-verification=JDF7k-jjxEQPzjFyk2Tli61JOiY56clfMJaa07XHpXsMS=ms279811891|www.vulcano.agencyd365mktkey=xNrexJTbC5auij68TbUDOygyZOQH0QNIske1IOyGtwoxapple-domain-verification=UopFPKGfFpEG9RrZgoogle-site-verification=FNbRr-kodFxrSGIGP9vfdljIpbp8CPEJgc9fbCG0Csg
Email authentication strong
- SPF
-
v=spf1 include:spf.protection.outlook.com include:_spf.google.com -allstrict (-all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:65e02a4f1c646@ag.eu.dmarcly.com,mailto:dmarc_agg@vali.email; ruf=mailto:65e02a4f1c646@fo.eu.dmarcly.com; fo=1;policy: quarantine - DKIM
-
Show 5 DKIM selectors
- google:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwFNyWbMmRumKWSlYbQ21rslA1AkVJDL/w76T32I9Rb6E7kvxjA6mnGV/312N+MUy0nc7RawC3mQOd… - selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uVS069RxO4zJkjE4Us/5rxW5d9D7QVVkGO1NXaS3dF4+DC18FgQuAcD2+x0sql1Yce+3MOi1AFVWG… - k2:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMYz39ZflHIHfRBA/OdYhdlgBPsH7WE7Gy6l5gEEQv+Ysi9dBruipY5jAvWCVQiRXtTUvJwjSt41HgNrmC… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ot154dlghXok/mfTBdXANc4p6AOzoAwTcGCQm6jZ6CVZoHefh1v9gvQAr3zaqPHgjdPMofXOgLaGTsA2x…
selectors probed - google:
Certificate (current)
WR3
Expires in 55 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.gstatic.com www.google.com www.googleadservices.com *.googlesyndication.com www.google-analytics.com cdn.iubenda.com www.googletagmanager.com *.azureedge.net www.clarity.ms cs.iubenda.com snap.licdn.com *.doubleclick.net; connect-src 'self' google.com *.azureedge.net www.google.it *.dynamics.com res.cloudinary.com *.google-analytics.com idb.iubenda.com *.clarity.ms *.googlesyndication.com www.google.com *.analytics.google.com *.ads.linkedin.com; frame-src 'self' www.google.com *.svc.dynamics.com www.googletagmanager.com td.doubleclick.net; style-src 'self' 'unsafe-inline' *.fontshare.com fonts.googleapis.com cdnjs.cloudflare.com; font-src 'self' *.fontshare.com fonts.gstatic.com www.google-analytics.com fonts.odoocdn.com cdnjs.cloudflare.com; img-src 'self' *.doubleclick.net www.google.it *.linkedin.com res.cloudinary.com *.svc.dynamics.com *.clarity.ms *.bing.com www.w3.org www.google.be www.google.com www.googlet- strict-transport-security
max-age=31536000; includeSubDomains; preload