bip-group.com

.com crawl

First seen 2026-04-12 · Last seen 2026-05-19 · ok HTTP/1.1 200 5829 ms crawled 2026-05-06

IE · 52.48.64.106 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Home
Language: en
Canonical: https://www.bip-group.com/

Open Graph

url: https://www.bip-group.com/
title: Home

Technology

CDN: Amazon CloudFront
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (2)

admin-prod.newbipsite.vidiemme.it×32
www.googletagmanager.com×1

Social

Registration

Registrar

TLDS L.L.C. d/b/a SRSPlus

Created

2018-11-10

Expires

2026-11-10 173 days left

Updated

2025-11-06

Name servers

dns.unh.net
dns2.unh.net
dns3.fabbricadigitale.com

DNS records live

NS

dns.unh.net
dns2.unh.net
dns3.fabbricadigitale.com

MX

0 mxa-00650c01.gslb.pphosted.com
0 mxb-00650c01.gslb.pphosted.com

TXT

Show 4 TXT records

jamf-site-verification=bcdH-p0gd57Mi7A-eKz9Jg
sophos-domain-verification=e2d75601102c7daee4d37a33cd013701a562162ab127535b49bc8129ce2edd4f
v=spf1 mx include:spf-00650c01.pphosted.com include:spf.protection.outlook.com -all
pexip-ms-tenant-domain-verification=82ea036d-bf6c-47c9-9cdb-7ac2974f598b

Verified for

Anthropic
Atlassian
DocuSign
Google
Google Workspace
Microsoft 365
OpenAI

Certificate (current)

from 2026-04-04 to 2026-07-03

Expires in 43 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.bip-group.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: default-src 'self'; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.iubenda.com https://*.google-analytics.com https://www.bip-group.com https://editor-prod.newbipsite.vidiemme.it/ https://admin-prod.newbipsite.vidiemme.it https://open.spotify.com/ https://www.youtube.com/ https://www.youtube-nocookie.com/ https://trinitymedia.ai/ https://vd.trinitymedia.ai/ https://www.googletagmanager.com/ *.captcha.awswaf.com/ https://js-eu1.hsforms.net/forms/embed/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://rsms.me/ https://fonts.googleapis.com/ https://cdn.bip-group.com/; img-src 'self' data: https://www.google.it https://www.googletagmanager.com https://admin-prod.newbipsite.vidiemme.it https://open.spotify.com/ https://www.youtube.com/ https://i.ytimg.com/ https://placehold.co/ *.openstreetmap.org *.tile.openstreetmap.org https://i.scdn.co/ https://forms-eu1.hsforms.com/ https://cdn.bip-group.c
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-embedder-policy: unsafe-none
cross-origin-resource-policy: cross-site