perrigo.it

HTML metadata

Title

Quality, Affordable Self-Care Products™ | Perrigo Italy

Description

Ci impegniamo ogni giorno per migliorare la vita delle persone con prodotti di self-care accessibili e di qualità che i consumatori continuano a scegliere in ogni parte del mondo. Scopri l'azienda

Language

it

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://www.perrigo.it/

Translations

it

Technology

CDN: Cloudflare
CMS: Drupal

Analytics

Google Tag Manager

Fonts

Adobe Fonts
Font Awesome

Third-party hosts loaded (5)

s3.eu-west-3.amazonaws.com×5
cdn.jsdelivr.net×2
use.fontawesome.com×1
use.typekit.net×1
www.googletagmanager.com×1

Social

Contact

Phone

DNS records

Email authentication strong

SPF

v=spf1 include:servers.mcsv.net ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: reject (enforced)

DKIM

k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…

selectors probed

Certificates

Loading certificate

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.perrigo.it/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: ALLOW-FROM https://www.perrigo.it/
permissions-policy: camera=(), fullscreen=self, geolocation=*, microphone=self
x-content-type-options: nosniff
content-security-policy: default-src 'self'; connect-src 'self' *.cookielaw.org *.onetrust.com bam.nr-data.net *.googletagmanager.com *.google.com *.google-analytics.com *.doubleclick.net *.facebook.net *.facebook.com *.hubspot.com; font-src 'self' *.onetrust.com *.fontawesome.com *.typekit.net; frame-src 'self' *.google.com *.regusto.eu *.doubleclick.net *.googletagmanager.com; img-src 'self' data: *.cookielaw.org s3.eu-west-3.amazonaws.com *.google-analytics.com *.jsdelivr.net *.typekit.net *.google.com *.google.co.in *.facebook.net *.facebook.com *.googletagmanager.com; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' *.cookielaw.org *.onetrust.com www.googletagmanager.com *.newrelic.com *.google-analytics.com *.doubleclick.net cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' *.jsdelivr.net *.typekit.net *.onetrust.com *.fontawesome.com cdn.jsdelivr.n
strict-transport-security: max-age=31536000; includeSubDomains