indexo.dev

carpano.com

.com crawl

First seen 2026-04-21 · Last seen 2026-05-12 · ok HTTP/1.1 200 2475 ms crawled 2026-05-15

FR · 217.154.18.207 · AS8560 IONOS SE

Reputation 100/100

Classifying

HTML metadata

Title
Home Eng - CarpanoCarpano | Il primo Vermouth
Description
Carpano - Il primo Vermouth
Language
en-GB
Generator
WordPress 5.8.13
Canonical
https://carpano.com/en/
Translations
  • en
  • it

Open Graph

url
https://carpano.com/en/
title
Home Eng - Carpano
locale
en_GB
site name
Carpano
locale:alternate
it_IT

Technology

Server
nginx
CMS
WordPress
Analytics
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (6)

  • cdn.jsdelivr.net×3
  • cdnjs.cloudflare.com×3
  • ajax.googleapis.com×2
  • fonts.googleapis.com×1
  • s.w.org×1
  • www.googletagmanager.com×1

Contact

Email
Phone

Registration

Registrar
Marcaria International LLC
Created
1998-03-18
Expires
2027-03-17 302 days left
Updated
2026-02-16
Name servers
  • ns01.trademarkarea.com
  • ns02.trademarkarea.com
  • ns03.trademarkarea.com

DNS records live

NS
  • ns01.trademarkarea.com
  • ns02.trademarkarea.com
  • ns03.trademarkarea.com

Email authentication no MX

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

R12
from 2026-05-07 to 2026-08-05
Expires in 78 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://carpano.com/en/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • weak frame protection
  • weak content type protection
Header values
referrer-policy
unsafe-url, strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN, SAMEORIGIN
permissions-policy
geolocation=(), microphone=(), camera=()
x-content-type-options
nosniff, nosniff
content-security-policy
default-src * data: blob: filesystem:; script-src * 'unsafe-inline' 'unsafe-eval' data: blob: filesystem:; style-src * 'unsafe-inline' data: blob: filesystem:; img-src * data: blob: filesystem:; font-src * data: blob: filesystem:; media-src * data: blob: filesystem:; object-src *; frame-src *; worker-src * blob:;
strict-transport-security
max-age=15768000; includeSubDomains

Links to (7)

Linked from (1)