astm.it

HTML metadata

Title

ASTM Group - Concessioni autostradali, EPC, Tecnologia

Description

ASTM è leader nella gestione di concessioni autostradali, EPC, ingegneria, costruzione di infrastrutture e tecnologia applicata alla mobilità

Language

it-IT

Generator

Powered by WPBakery Page Builder - drag and drop page builder for WordPress.

Canonical

https://www.astm.it/

Translations

en
it

Feeds

ASTM S.p.A. » Feed RSS
ASTM S.p.A. » Feed dei commenti RSS

Open Graph

url: https://www.astm.it/
title: ASTM Group - Concessioni autostradali, EPC, Tecnologia
locale: it_IT
site name: ASTM S.p.A.
description: ASTM è leader nella gestione di concessioni autostradali, EPC, ingegneria, costruzione di infrastrutture e tecnologia applicata alla mobilità

Technology

Server: nginx
CMS: WordPress
PHP: 7.4.6 end of life
jQuery: 3.7.1

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Fonts

Google Fonts

Third-party hosts loaded (8)

fonts.googleapis.com×5
code.responsivevoice.org×3
cdn.userway.org×2
consent.cookiebot.com×2
www.googletagmanager.com×2
consentcdn.cookiebot.com×1
fonts.gstatic.com×1
gmpg.org×1

Social

Contact

Phone

DNS records live

NS

melinda.ns.cloudflare.com
patrick.ns.cloudflare.com

MX

0 astm-it.mail.protection.outlook.com

TXT

Show 5 TXT records

MS=84BBC722A4F9918413DAB0772E8E947C3FA10DB
MS=84BBC722A4F9918413DAB0772E8E947C3FA10DB3
c6evojBCCJwvEfGOiAJg4iZTa4rJbhA6tQAIp2Q+G15ltgS407BysZRz618tRkBlxrYiZlooUpMpYUH60sCV+w==
have-i-been-pwned-verification=219c6f2e0c3ed618bcd139de3245f37b
wombat-verification=3KwxVCQV1HEp-aRXRTKKaZ5G0frhk

Verified for

Microsoft 365

Email authentication weak

SPF: v=spf1 mx ip4:85.18.87.144/28 ip4:93.51.141.122 ip4:93.62.157.32/28 include:spf.protection.outlook.com ip4:51.15.120.204 -all
strict (-all)
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-05-14 to 2026-08-12

Expires in 72 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.astm.it/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
permissions-policy: geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://cdn.datatables.net https://cdnjs.cloudflare.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.userway.org https://cdn.jsdelivr.net https://googleads.g.doubleclick.net https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://code.responsivevoice.org https://code.jquery.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://cdn.datatables.net https://fonts.googleapis.com https://cdn.userway.org; img-src 'self' data: https: https://astm.it blob:; font-src 'self' data: https://fonts.gstatic.com https://cdn.userway.org; connect-src 'self' https:; frame-src 'self' https://www.google.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://cdn.userway.org https://www.youtube.com https://player.vimeo.com; frame-ancestors http
strict-transport-security: max-age=63072000; includeSubDomains; preload