cng.it

.it crawl

First seen 2026-05-20 · Last seen 2026-05-31 · ok HTTP/1.1 200 2051 ms crawled 2026-05-27

IT · 217.175.51.206 · AS33964 Sogei Societa' Generale d' Informatica S.p.A.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title

Consiglio Nazionale Geometri

Language

it-IT

Canonical

https://cng.it

Translations

Open Graph

url: https://cng.it
title: HOME - Geometri CNG
locale: it_IT
site name: Geometri CNG
locale:alternate: en_US

Technology

Server: Apache
Stack: Java

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (2)

fonts.googleapis.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

dns11.interbusiness.it
dns3.interbusiness.it
dns7.interbusiness.it

MX

10 mailfree.cng.it

Email authentication partial

SPF: v=spf1 include:spf.mymailer.it a:smtp-news.nsoft.it ip4:195.140.184.0/22 ip4:91.192.40.0/22 ip4:192.168.120.0/24 ip4:172.16.10.1 include:_spf.aruba.it ~all
softfail (~all)
DMARC: v=DMARC1; p=none; sp=none; rua=mailto:dmarc@mymailer.it; ruf=mailto:dmarc@mymailer.it; rf=afrf; pct=100; ri=86400;
policy: none (monitoring only) · sp=none
DKIM: no key found at common selectors

Certificate (current)

Actalis Domain Validation Server CA G3

from 2025-09-24 to 2026-10-11

Expires in 133 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://cng.it/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; frame-ancestors 'self'; frame-src www.google.com 217.175.51.199 'self' www.youtube.com; base-uri 'self'; connect-src 'self' www.google-analytics.com region1.google-analytics.com plausible.io; img-src 'self' laureadelgeometra.cngegl.it www.google-analytics.com www.googletagmanager.com web.liferay.com data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com plausible.io cdn.datatables.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.gstatic.com
strict-transport-security: max-age=31536000; includeSubDomains