comune.pisa.it
HTML metadata
Technology
- Analytics
-
- Plausible
Third-party hosts loaded (3)
- flyimg.opencityitalia.it×27
- static.opencityitalia.it×8
- plausible.io×1
Social
Contact
DNS records live
- NS
-
- dns.regione.toscana.it
- spectrum.comune.pisa.it
- MX
-
- 10 mx.zimbraopen.it
- TXT
-
r84d91um5qkat2nv6kine3klvr
- Verified for
-
- Cisco
Email authentication strong
- SPF
-
v=spf1 include:amazonses.com include:_spf.google.com ip4:85.159.115.154/32 ip4:159.213.101.243/32 ip4:80.88.164.6/32 redirect=_spf.zimbramail.itmissing all - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:dmarc@studiostorti.uriports.com; ruf=mailto:dmarc@studiostorti.uriports.com; fo=1:d:spolicy: quarantine - DKIM
-
- s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8s6Hv2ZzVonU+XrdpPBMl0pmFdK1zv+nzB8p9PvynADbI27DBB52XPYosN/apWG2KLvqDztNXAZ0SY2BB… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7aGXYCxkTi/D41ZG0f6bi9a3t/RQlvt1AxWaaJapuU1q3wZaIH7ECZb9NmZeI0t8zO6PPlAizyj618yaz…
selectors probed - s1:
Certificate (current)
E7
Expires in 41 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
sameorigin- permissions-policy
camera=(), payment=(), microphone=(self)- x-content-type-options
nosniff- content-security-policy
default-src *; font-src 'self' data: https://static.opencityitalia.it https://fonts.gstatic.com https://acsbapp.com https://maxcdn.bootstrapcdn.com https://cdn-embed.comuni-chiamo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https:; img-src * 'self' data: https: blob:- strict-transport-security
max-age=63072000; includeSubdomains