airpullman.com

.com crawl

First seen 2026-04-15 · Last seen 2026-05-19 · ok HTTP/1.1 200 3149 ms crawled 2026-05-10

IT · 185.58.117.114 · AS31034 Aruba S.p.A.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Homepage - AirPullman
Description: Air Pullman, da oltre 60 anni trasporta con i suoi pullman milioni di passeggeri attraverso collegamenti aeroportuali, noleggi e trasporto pubblico locale.
Language: it

Technology

CMS: Gatsby

Analytics

Google Tag Manager

Cookie consent

Iubenda

Third-party hosts loaded (2)

cdn.iubenda.com×2
www.googletagmanager.com×1

Contact

Phone

00216510123

Registration

Registrar

Tucows Domains Inc.

Created

1997-11-12

Expires

2026-11-11 175 days left

Updated

2025-10-08

Name servers

ns1.dnsitalia.net
ns2.dnsitalia.net
nsct.dnsitalia.net
nsrm.dnsitalia.net

DNS records live

NS

ns1.dnsitalia.net
ns2.dnsitalia.net
nsct.dnsitalia.net
nsrm.dnsitalia.net

MX

10 mx1.safe-mail.it
20 mx2.safe-mail.it

TXT

Show 7 TXT records

google-site-verification=ajHdlknFC1j4QL9aTQUwQ0xF-sRXg9sM2zsy8sJN1ZQ
5qf4lgmds3k051jh06d801p8mspqvk9z
MS=ms86885950
_3ousvvmrecp0cq6twq2rkt1oexnmt2s
th7d95j8g5w1yp9db1shh176mr7wdv9h
5vytckk8j9drfpt1n7zp8shgm26vv002
_n3os6mjg5yc0d7gycharkvzr6q4eedc

Email authentication partial

SPF: v=spf1 include:_spfstrict.interhost.it include:spf.safe-mail.it include:spf.engitel.com include:spf.protection.outlook.com mx ~all
softfail (~all)
DMARC: v=DMARC1; p=none; rua=mailto:dmarc@engitel.com;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

R13

from 2026-03-13 to 2026-06-11

Expires in 23 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.airpullman.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), usb=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' cdn.jsdelivr.net *.iubenda.com *.googletagmanager.com *.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com matomo.engitel.com https://unpkg.com *.google.com *.iubenda.com *.gstatic.com *.jsdelivr.net *.polyfill.io; style-src 'self' 'unsafe-inline' *.iubenda.com *.bootstrapcdn.com *.googleapis.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com data:; font-src 'self' *.gstatic.com *.bootstrapcdn.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com data:; img-src 'self' data: matomo.engitel.com *.googletagmanager.com; frame-src 'self' *.google.com *.spotify.com *.google-analytics.com *.iubenda.com; connect-src 'self' *.google-analytics.com *.googletagmanager.com *.iubenda.com matomo.engitel.com;
strict-transport-security: max-age=63072000; includeSubDomains; preload