gse.it

.it crawl dns

First seen 2026-05-19 · Last seen 2026-05-30 · ok HTTP/1.1 200 3541 ms crawled 2026-05-29

DE · 23.38.98.69 · AS20940 Akamai International B.V.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: GSE - Gestore dei Servizi Energetici | Homepage
Description: Scopri le opportunità offerte dalla transizione energetica per cittadini, imprese e Pubbliche Amministrazioni.
Language: it-IT
Generator: Microsoft SharePoint
Canonical: https://www.gse.it:443/

Technology

Server: Microsoft-IIS
ASP.NET: 4.0.30319
jQuery: 3.1.1 known XSS (<3.5)

Third-party hosts loaded (3)

codicebusiness.shinystat.com×1
i.creativecommons.org×1
www.shinystat.com×1

Social

Contact

Phone

05754381001

DNS records live

NS

a1-19.akam.net
a11-67.akam.net
a13-67.akam.net
a16-67.akam.net
a22-67.akam.net
a6-64.akam.net

MX

10 gse-it.mail.protection.outlook.com

TXT

actalis-dcv=mpbknq8btg7r3ot2hd9ur08upl

Verified for

Cisco
Google
Microsoft 365

Email authentication partial

SPF

v=spf1 a mx ip4:5.97.166.16 ip4:93.47.215.16 ip4:31.199.8.40 ip4:89.97.69.26 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none; pct=100; rua=mailto:DMARC_RUA@gse.it; ruf=mailto:DMARC_RUF@gse.it; fo=1

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQClt36xCVtQTFepqBv9aQI7UmuwE44kFCijRQaOeLK5kJBpPz7Kwu2RED9iaoI9sU+pHkG+x4cGddlmYLSsQk…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDSdds+8fZqwqxBxZT1YJP5jKo/jRKmL38k4v2dJN0GJm620fnti3K5XM+MsPAdKtZN2rzaEZwK1+gnFE2USv…

selectors probed

Certificate (current)

Actalis Organization Validated Server CA G3

from 2026-02-02 to 2027-02-02

Expires in 247 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.gse.it/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com *.teams.microsoft.us local.teams.office.com *.powerapps.com *.yammer.com *.officeapps.live.com *.office.com *.stream.azure-test.net *.microsoftstream.com *.dynamics.com *.microsoft.com onedrive.live.com *.onedrive.live.com;
strict-transport-security: max-age=157680000