withmila.co

Aesthetic AI Marketing — Done-for-you social media for aesthetic practices

Meet Mila — a marketing assistant that creates, designs, schedules, and optimizes premium social content for aesthetic practices, so your team can stop juggling Canva, ChatGPT, schedulers, and agency emails.

Built with

Frontend framework

Next.js

Also detected

Infrastructure

Vercel

Overview

Status

alive

Registered

unknown (this domain's registry doesn't publish it via RDAP)

First seen here

2026-09-22

Security grade

F (55/100, from headers & TLS)

Privacy score

100/100 (0 third-party script hosts, 0 tracking/marketing services)

Hosting

Amazon.com, Inc. · AS16509 · United States

Server header

Vercel

Response time

601 ms to first byte, measured from our crawler

TLS certificate

Let's Encrypt · TLSv1.3 · expires 2026-11-19

Language

en

Mobile-ready

yes (viewport meta tag)

Linked to from

2 other sites seen so far

What to fix

1. Add a Content-Security-Policy
   Limits which scripts can run, and is the main defense against XSS. Start with Content-Security-Policy-Report-Only to test.
2. Add X-Content-Type-Options
   Header: X-Content-Type-Options: nosniff
3. Prevent clickjacking
   Header: X-Frame-Options: DENY (or a CSP frame-ancestors directive).
4. Add a Referrer-Policy
   Header: Referrer-Policy: strict-origin-when-cross-origin

Security & email signals

• ✓ HTTPS
• ✓ HSTS
• ✗ Content-Security-Policy
• ✗ X-Content-Type-Options
• ✗ X-Frame-Options
• ✗ Referrer-Policy
• ✗ Permissions-Policy
• ✓ SPF record
• ✓ DMARC record
• ✗ DKIM record
• ✓ Cookies set securely
• ✓ Has real content (not an empty shell)
• ✓ Valid TLS certificate

Badge

Show this site's security grade in a README or footer:

<a href="https://webtelemetry.dev/site/withmila.co"><img src="https://webtelemetry.dev/badge/withmila.co.svg" alt="Security grade"></a>

Generated automatically from passive, publicly observable data. Think something here is wrong or want this profile removed? See /bot. Machine-readable: JSON.