The Cyber Exposure Score is a published 0–100 formula built only from publicly observable signals. How this is calculated.
Posture summary
Email authentication
SPF ✓ ~all DMARC none DKIM ✓ · Microsoft 365 DNSSEC ✗DNS hygiene
5 nameservers single DNS provider CAA ✓ IPv6 ✓Web & transport hygiene
HTTPS redirect ✓ HSTS ✗ CSP ✗ 2 third-party scripts, 2 without an integrity hash no mixed content security.txt ✗TLS / certificate
TLS TLSv1.3 53d to expiry TLS 1.0/1.1 not acceptedSoftware age
1 JavaScript library with published issues no software past end of life found a distribution may still patch server software; a library issue depends on how it is usedInternet exposure
2 open ports 0 KEVBreach metadata
0 public breaches no leak-site listingDomain & hosting
6 public hostnames AS12779 · ITGATE IT.Gate S.p.A. no blocklist hitsAlso analysed: www.canotai.it
www.canotai.it sends visitors to canotai.it; both names are covered. The domain-level findings above apply to both; these are www.canotai.it's own website checks.
score 87/100 · good TLS TLSv1.3 53d to expiry HTTPS redirect ✓ HSTS ✗ CSP ✗ 2 open ports 0 KEVPublic attack surface (6 hostnames in Certificate Transparency)
Hostnames this organization published in public TLS certificates. Passive OSINT — nothing was scanned.
From the names alone: 0 remote access or sign-in, 1 admin tools, 0 non-production.
The hostname inventory — which forgotten hosts exist and where — is part of the complete audit for this domain.
Lookalike domains (1 registered of 96 checked)
Registered permutations of this domain. Existence is a fact, not an accusation — ownership and intent are not assessed. Those able to receive mail are the ones usable for invoice fraud and phishing. The Risk score (0–100) is a published formula weighing mail capability, registration age, spelling, what the homepage shows and phishing-feed hits, reduced when a name looks brand-owned (same registrar/nameservers, a redirect to this domain) or merely parked. How this is calculated.
| Domain | Type | Mail-capable | Registered | Risk |
|---|---|---|---|---|
| acnotai.it | transposition | yes | — | 48 high |
Recommendations
-
highEnforce DMARC
No enforcing DMARC policy was observed. Publish a DMARC record and move to p=quarantine then p=reject to reduce spoofing.
-
mediumEnable DNSSEC
DNSSEC signing was not detected for this domain.
-
highMonitor lookalike domains
1 registered lookalike domain(s) can receive mail, which is what makes them usable for invoice fraud and credential phishing. Monitor them and consider defensive registrations.
-
mediumUpdate JavaScript libraries with published issues
Underscore.js 1.13.1: these versions have publicly listed issues. Whether they can be used against this site depends on how it calls them; updating is usually the quicker answer.
Sources: Ransomware.live · Have I Been Pwned (CC BY 4.0) · Shodan InternetDB · CISA KEV catalog · NVD · FIRST EPSS · CVSS-BT · Retire.js (Apache-2.0)
This product uses the NVD API but is not endorsed or certified by the NVD.
Refresh this report
Run a fresh free report for canotai.it: live results, every fix in priority order and a PDF to share. The complete audit adds the evidence and the full lists behind each finding.
Open the free reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.