twentys.it
HTML metadata
Technology
- Server
- nginx
- Analytics
-
- Google Tag Manager
Third-party hosts loaded (2)
- elfsightcdn.com×1
- www.googletagmanager.com×1
Contact
- Phone
DNS records live
- NS
-
- ns.abdns.biz
- ns.abdns.eu
- ns.abdns.info
- MX
-
- 10 mail.twentys.it
- 5 iredmail.twentys.it
- TXT
-
MS=3C6405F93462587E5B1BD1900E140CDD83A74FF7
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 mx a ip4:185.58.123.143 ip4:95.110.231.187 ip4:95.110.231.187 ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; adkim=r; aspf=r; rua=mailto:info@twentys.it; ruf=mailto:info@twentys.itpolicy: none (monitoring only) - DKIM
-
- default:
v=DKIM1; t=s; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYYCtCejqUJkVSCUO+W7HRuJeY0pM343f+6p8WYebZUtwhREF6w8EMHZztHKbMOudChDmB7zh…
selectors probed - default:
Certificate (current)
E8
Expires in 68 days
HTTP security headers
- present
-
- content-security-policy
- content-security-policy-report-only
- x-frame-options
- findings
-
- missing HSTS
- missing content type protection
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- content-security-policy
report-uri https://www.youtube.com data:;- content-security-policy-report-only
default-src 'self' https://region1.google-analytics.com; img-src * data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://elfsightcdn.com/platform.js https://staticxx.facebook.com https://www.gstatic.com https://maps.googleapis.com https://www.googletagmanager.com https://www.google.com https://www.google-analytics.com https://connect.facebook.net https://www.youtube.com https://www.facebook.com https://fonts.googleapis.com https://ajax.googleapis.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data:; frame-src 'self' 'unsafe-inline' https://www.youtube.com https://www.google.com data:; report-uri 'https://www.youtube.com data:;'