piratinviaggio.it

HTML metadata

Title: PiratinViaggio | Voli, hotel, crociere, treni e vacanze low cost
Description: Troviamo le migliori offerte di viaggi disponibili online, voli low cost, hotel scontati, pacchetti vacanze da non perdere e molto altro!
Language: it
Canonical: https://www.piratinviaggio.it/

Open Graph

url: https://www.piratinviaggio.it
title: PiratinViaggio | Voli, hotel, crociere, treni e vacanze low cost
locale: it_IT
site name: PiratinViaggio
description: Troviamo le migliori offerte di viaggi disponibili online, voli low cost, hotel scontati, pacchetti vacanze da non perdere e molto altro!

Technology

CDN: Cloudflare

Third-party hosts loaded (3)

media.holidaypirates.group×49
image.urlaubspiraten.de×36
images.ctfassets.net×5

Social

DNS records live

NS

bill.ns.cloudflare.com
elaine.ns.cloudflare.com

MX

10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
30 aspmx2.googlemail.com
30 aspmx3.googlemail.com

Verified for

Google
Meta

Email authentication strong

SPF

v=spf1 a mx ip4:144.76.44.26 ip4:176.9.134.230 ip4:176.9.83.102 ip4:176.9.107.7 ip4:176.9.107.22 ip4:148.251.252.123 ip4:144.76.44.5 ip4:148.251.15.8 ip4:144.76.44.21 ip4:136.243.154.18 include:_spf.google.com include:spf.mandrillapp.com include:amazonses.com ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarcreports@piratinviaggio.it; pct=100; aspf=r; adkim=r;

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnl18rKLMj03GN88Zgk74fxGykqOE0/aeB6JDSkIGdb1zC5MtkoPXFqW0RpCqTzhT4YVsrnlFZkzBp…

selectors probed

Certificate (current)

WE1

from 2026-04-22 to 2026-07-21

Expires in 50 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.piratinviaggio.it/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;script-src * 'unsafe-eval' 'unsafe-inline';script-src-attr 'unsafe-inline';style-src * 'unsafe-inline';img-src * data:;font-src *;connect-src * ;manifest-src data:;frame-ancestors 'self';form-action *;base-uri 'self';object-src 'none'
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin