bpp.it

HTML metadata

Title: BPP - Una banca solida ha forti radici
Description: Visita bpp.it per scoprire i prodotti e i servizi bancari, le soluzioni finanziarie e assicurative che la Banca Popolare Pugliese offre a soci, imprese e privati.
Language: it
Generator: Sitefinity 13.0.7300.0 PE
Canonical: https://www.bpp.it/home

Open Graph

url: https://www.bpp.it/home
title: BPP - Una banca solida ha forti radici
site name: Banca Popolare Pugliese

Technology

Server: Microsoft-IIS
ASP.NET: 4.0.30319
jQuery: 3.7.1

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Third-party hosts loaded (3)

consent.cookiebot.com×1
kit.fontawesome.com×1
www.googletagmanager.com×1

Social

Contact

Phone

02848590754

DNS records live

NS

dr.bpp.it
ns1.bpp.it

MX

10 smtp.google.com

Verified for

Atlassian
Brevo
Google

Email authentication partial

SPF

v=spf1 a mx ip4:88.39.203.172 ip4:88.39.203.165 ip4:156.54.62.234 ip4:193.41.84.86 ip4:193.41.84.87 ip4:193.41.84.88 ip4:156.54.212.10 ip4:185.228.36.0/22 include:mailchef.4dem.it include:_spf.google.com -all

strict (-all)

DMARC

v=DMARC1; p=none; sp=none; pct=100; adkim=r; aspf=r; rua=mailto:rua@dmarc.brevo.com

policy: none (monitoring only) · sp=none

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCTXfRV6oOJvOqsAALW3oPy/87iNvzND8UlO6OkRwMw1wOUgHYOQlDqZViG6qHo4soHrGkJuWBlFaH+HzRhu7…

selectors probed

Certificate (current)

Thawte TLS RSA CA G1

from 2026-05-29 to 2026-12-14

Expires in 196 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.bpp.it/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com cdnjs.cloudflare.com unpkg.com *.fontawesome.com *.googleapis.com *.gstatic.com www.google.com *.google-analytics.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com/iframe_api platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com cdn.ampproject.org https://snap.licdn.com/ https://diffuser-cdn.app-us1.com/diffuser/diffuser.js https://cdn.leadchampion.com/leadchampion.js https://mastertag.leadchampion.com/ https://prism.app-us1.com/ https://trackcmp.net/ https://consent.cookiebot.com/ https://consentcdn.cookiebot.com/ https://contattachat.bpp.it https://stackpath.bootstrapcdn.com https://cdn.jsdel
strict-transport-security: max-age=31536000