See the problems here: http://www.dnsinspect.com/bsc.it/1430916268
http://www.bsc.it./ is being resolved alas SaferChrome: Insecure login: Password will be transmited in clear to http://www.bsc.it./web/guest/welcome?p_p_id=58&p_p_lifecycle=1&p_p_state=normal&p_p_mode=view&p_p_col_id=column-1&p_p_col_count=1&_58_struts_action=%2Flogin%2Flogin detected (see report)
OK: http://toolbar.netcraft.com/site_report?url=http://www.bsc.it.

Excessive headers warning: https://asafaweb.com/Scan?Url=www.bsc.it
See vuln.: http://www.domxssscanner.com/scan?url=http%3A%2F%2Fwww.bsc.it
mitigated because of Cross Site Request Forgery (CSRF) Prevention in Liferay.

polonus (volunteer website security analyst and website error-hunter)