a2a.it

HTML metadata

Title: A2A Energia - Luce e gas per la tua casa e il tuo business
Description: Scopri le migliori forniture di energia elettrica, luce e gas per casa e business con A2A Energia: trova subito l'offerta perfetta per te
Language: it
Canonical: https://www.a2a.it

Technology

CDN: Akamai
Server: volt-adc

Analytics

Google Analytics
Google Tag Manager

Cookie consent

Iubenda

Third-party hosts loaded (4)

www.googletagmanager.com×3
www.google-analytics.com×2
cdn.iubenda.com×1
cs.iubenda.com×1

Social

Contact

Phone

12883420155

DNS records live

NS

dns1.a2a.eu
dns2.a2a.eu
dns3.a2a.eu
dns4.a2a.eu
dns5.a2a.eu

MX

10 mxa-001dc302.gslb.pphosted.com
10 mxb-001dc302.gslb.pphosted.com

TXT

Show 8 TXT records

00Dbl0000017chV=1TBc300000002Ur
4psqm87l6hp69tfv4dtw89xl4byhl7c5
autodesk-domain-verification=UenH_v1n264bW811d9iX
R4BSeRfqXEsTAvZwmHKGOuk+cC+JxZku43bjLrjy3Yg=
infoblox-domain-mastery=1162d0118ba19aabbadae141af38a38e19bd56816a09992df381a125c706d4dacd
zctjx1hkjqztmq7r9h5j62rx1x41scqp
_t4nqs8swwxsc23ux7qx66si80a02poi
_h1f33e82v9g312ksbrjgrunfgw06wpv

Verified for

Atlassian
Dynatrace
Google
Google Workspace
Microsoft 365
MongoDB

Email authentication strong

SPF

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQo0efrSX/LXDEeO6RzI416M9qcnJQaRDea/N6WGLW87qG2twgChMH3yGs9L5xFnwzo+kfXRteAg2g…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbyrTAyfO4RQfSy7+G3AKwJojGTwqwiFLQlTcItgRXIf0Mtm6w0wVtQoL8NEws0lVrLxVT+SGPUJSx…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2026-01-19 to 2027-02-20

Expires in 275 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.a2a.it/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

missing HSTS
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'nonce-0M2ZAn+TpOF3zL2cu6qCeg==' 'strict-dynamic' 'unsafe-eval' https://*.iubenda.com/ https://*.liveperson.net/ https://*.lpsnmedia.net/ https://www.googletagmanager.com/ https://*.doubleclick.net https://www.google.com/ https://www.gstatic.com/ https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://unpkg.com/ https://*.my.site.com/ https://*.force.com/ https://*.glancecdn.net/ https://*.outbrain.com/ https://bat.bing.com/ https://connect.facebook.net/ https://*.salesforceliveagent.com/ https://js-tag.zemanta.com/ https://*.hotjar.com https://www.google-analytics.com/ https://code.jquery.com/jquery-3.6.0.slim.min.js https://*.clarity.ms/ https://*.criteo.com https://static.criteo.net https://www.googleadservices.com/ https://www.google.com/recaptcha/ https://d38nbbai6

Links to (7)

Linked from (1)

piccoloteatro.org×1