gruppocap.it

HTML metadata

Title

Gruppo CAP | Gestore del servizio idrico integrato

Description

Gruppo CAP è la green utility che gestisce il servizio idrico nella Città metropolitana di Milano ed è attivo anche nei settori del trattamento dei rifiuti, energia e economia circolare.

Language

it

Canonical

https://www.gruppocap.it/it

Translations

en
it

Open Graph

url: https://www.gruppocap.it/it
title: Gruppo CAP | Gestore del servizio idrico integrato
locale: it
site name: Gruppo CAP
description: Gruppo CAP è la green utility che gestisce il servizio idrico nella Città metropolitana di Milano ed è attivo anche nei settori del trattamento dei rifiuti, energia e economia circolare.

Technology

CDN: Amazon CloudFront
Server: Cloudfront

Analytics

Google Tag Manager

Third-party hosts loaded (3)

apps.mypurecloud.de×1
cobrowse.mypurecloud.de×1
www.googletagmanager.com×1

Social

Contact

Email

assistenza.clienti@gruppocap.it

Phone

Address

via Rimini 38, 20142, Milano, Italia

DNS records live

NS

miki.ns.cloudflare.com
rudy.ns.cloudflare.com

MX

4 pfas.gruppocap.it
4 pfmi.gruppocap.it

TXT

successfactors-site-verification=NDdkY2RjYTEzMGNjYzgwYzI0MTE3NTYwYjY1MjRjNjM4MzlmN2Y2Y2Y1MzE4N2Q4ZDg1MzU1ODdmMzhhODRhZA==

Verified for

DocuSign
Meta
Microsoft 365
OpenAI

Email authentication strong

SPF

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; pct=100;fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: reject (enforced)

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Go Daddy Secure Certificate Authority - G2

from 2025-09-10 to 2026-10-12

Expires in 133 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.gruppocap.it

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: DENY
x-content-type-options: nosniff
content-security-policy: default-src 'none'; base-uri 'none'; img-src 'self' https://*.ytimg.com/ https://www.googletagmanager.com https://fonts.gstatic.com/ https://*.bing.com/c.gif https://*.clarity.ms/c.gif https://www.facebook.com/ https://develop-gruppocap-object-storage.s3.eu-central-1.amazonaws.com/ https://staging-gruppocap-object-storage.s3.eu-central-1.amazonaws.com/ https://production-gruppocap-object-storage.s3.eu-central-1.amazonaws.com/ data: https://www.google-analytics.com/ https://maps.googleapis.com/maps/ https://maps.gstatic.com/mapfiles/ https://cdn.cookielaw.org/logos/c8f6cee5-8e7d-45cd-b62a-0c89dace0d21/b29d2207-e10d-4543-a88e-7c259bcc412d/3e5c8091-4812-423e-9a00-db2783e2f153/Logo.JPG https://cdn.cookielaw.org/logos/static/poweredBy_ot_logo.svg https://cdn.cookielaw.org/logos/static/ot_close.svg https://cdn.cookielaw.org/logos/static/ot_persistent_cookie.png https://cdn.cookielaw.org/logos/ https://www.google.it/ads/ga-audiences https://gtm.gruppocap.it/ https://px.ads.linkedin.com/collec
strict-transport-security: max-age=63072000; includeSubdomains; preload