comune.udine.it

HTML metadata

Title: Comune di Udine
Description: Sito istituzionale del Comune di Udine
Language: it

Open Graph

url: https://www.comune.udine.it
title: Homepage
locale: it
site name: Comune di Udine
fax number: +39 0432 127 0355
phone number: +39 0432 127 1111

Technology

Analytics

Plausible

Third-party hosts loaded (3)

flyimg.opencityitalia.it×20
static.opencityitalia.it×8
plausible.io×1

Social

Contact

Phone

DNS records live

NS

ns1.comune.udine.it
ns2.comune.udine.it

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

actalis-dcv=nTL9YqSMe0tCVkomgW9J7jR
MS=654F585D619915A9030FAE0E08169BC75DBC6860

Verified for

Google

Email authentication strong

SPF

v=spf1 ip4:193.43.177.67 ip4:212.210.178.102 ip4:18.184.211.7 ip4:172.23.224.208 ip4:193.43.177.0/24 a:mail-eell.regione.fvg.it ip4:193.43.179.0/24 ip4:193.42.70.0/24 ip4:10.130.32.96/32 ip4:82.193.36.83 include:_spf.google.com include:spf.turbo-smtp.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine;

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDuKAY8eXxI3c5VHYxa+NUJisxoRqxgB047OS5nTMm/yjclDjV18WKfvi4iR79/54lAjJRwcTfl1MVxRwYPYJ…

selectors probed

Certificate (current)

E8

from 2026-05-26 to 2026-08-24

Expires in 85 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.comune.udine.it/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: sameorigin
permissions-policy: camera=(), payment=(), microphone=(self)
x-content-type-options: nosniff
content-security-policy: default-src *; font-src 'self' data: https://static.opencityitalia.it https://fonts.gstatic.com https://acsbapp.com https://maxcdn.bootstrapcdn.com https://cdn-embed.comuni-chiamo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https:; img-src * 'self' data: https: blob:
strict-transport-security: max-age=63072000; includeSubdomains
content-security-policy-report-only: default-src 'self' data:; connect-src 'self' https://plausible.io *.webanalytics.italia.it *.sentry.io *.sentry-cdn.com *.opencontent.io *.opencontent.it *.opencityitalia.it *.stanzadelcittadino.it wss://stregatto.opencityitalia.it https://nominatim.openstreetmap.org https://servizi.comune.udine.it; font-src 'self' data: *.opencontent.io *.opencontent.it *.opencityitalia.it; frame-src 'self' *.youtube.com *.vimeo.com; img-src 'self' data: blob: https://flyimg.opencityitalia.it https://flyimg-qa.opencityitalia.it *.openstreetmap.org *.ytimg.com https://s3-eu-west-1.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://plausible.io https://www.googletagmanager.com *.sentry-cdn.com *.webanalytics.italia.it *.opencontent.io *.opencontent.it *.opencityitalia.it https://nominatim.openstreetmap.org https://servizi.comune.udine.it; style-src 'self' 'unsafe-inline' https:; report-uri https://csp-collector.opencontent.it/csp?env=production&app=cms; worker-src 'self' blob: