indexo.dev

anicura.it

.it crawl

First seen 2026-05-12 · Last seen 2026-05-18 · ok HTTP/1.1 200 13168 ms crawled 2026-05-18

SE · 217.114.94.2 · AS30811 Optimizely AB

Reputation 100/100

Classifying

HTML metadata

Title
AniCura Italy | AniCura Italy
Language
it-IT
Canonical
https://www.anicura.it/
Translations
  • it-it

Technology

CDN
Cloudflare
Analytics
  • Google Tag Manager
Fonts
  • Adobe Fonts

Third-party hosts loaded (3)

  • use.typekit.net×2
  • www.google.com×1
  • www.googletagmanager.com×1

Social

Contact

Email

DNS records live

NS
  • dns01.dipcon.com
  • dns02.ports.se
  • dns03.ports.se
  • dns04.ports.net
MX
  • 0 anicura-it.mail.protection.outlook.com
TXT
Show 7 TXT records
  • docusign=2e03eca4-bf5b-4ef6-9637-33d6bff7b714
  • onetrust-domain-verification=41a65bcefb9e45d1b95345c32bc82b5b
  • MS=ms97424285
  • google-site-verification=Pw6cuav5Qxka0rgF5-zXvb_h5eiUglkGSCjqgEU9M6Q
  • google-gws-recovery-domain-verification=52299513
  • google-site-verification=O7a1tW7xs0939tP0HFwCnlFDL5yjb93NIShK7bj5Ze0
  • 1password-site-verification=E5MG2IJ5WJEAZHJPLWMRGOOBYY

Email authentication no MX

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

WE1
from 2026-05-07 to 2026-08-05
Expires in 78 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.anicura.it/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
camera=(), microphone=(), geolocation=(self "https://www.google.com")
x-content-type-options
nosniff
content-security-policy
default-src 'self' data: https: wss: blob:; frame-ancestors 'self'; base-uri 'self'; frame-src 'self' https: https://www.google.com; object-src 'none'; script-src 'self' 'unsafe-inline' https: 'unsafe-eval' *.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com 'nonce-ubMrnbwFCARUf5NsBnIjAA==' 'strict-dynamic'; style-src 'self' 'unsafe-inline' *.usercentrics.eu cdnjs.cloudflare.com cdn.jsdelivr.net *.typekit.net *.googleapis.com; font-src 'self' data: use.typekit.net https://fonts.gstatic.com; upgrade-insecure-requests; block-all-mixed-content
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (4)

Linked from (1)