bbbell.it
HTML metadata
Technology
- Server
- nginx
- CMS
- WordPress
- jQuery
- 3.7.1
- Fonts
-
- Google Fonts
Third-party hosts loaded (2)
- kit.fontawesome.com×2
- fonts.gstatic.com×1
DNS records live
- NS
-
- dns1.bbbell.it
- dns2.bbbell.it
- dns3.bbbell.it
- MX
-
- 10 mail.bbbell.it
- TXT
-
Show 4 TXT records
MS=A50446449F687C7038F4E6084A8112C2F5F7AE90abuseipdb-verification=pzs8CZlI_e7cl7vnsoyk2rs91d9okvwwudmbx1sp90e37bae-7ef0-433f-b40a-953f7b83c12a
- Verified for
-
- Apple
- Brevo
Email authentication partial
- SPF
-
v=spf1 ip4:77.108.62.2 ip4:77.108.62.6 ip4:77.108.62.15 ip4:77.108.62.4 ip4:77.108.62.5 ip4:77.108.62.19 ip4:77.108.62.20 include:spf.sendinblue.com -allstrict (-all) - DMARC
-
v=DMARC1;p=none;rua=mailto:postmaster@bbbell.it,mailto:f2da567ee1@rua.easydmarc.eu;ruf=mailto:f2da567ee1@ruf.easydmarc.eu; fo=1;policy: none (monitoring only) - DKIM
- no key found at common selectors
Certificate (current)
R13
Expires in 52 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
default-src 'self' ka-p.fontawesome.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.google.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleapis.com *.gstatic.com connect.facebook.net *.doubleclick.net *.linkedin.com *.licdn.com *.criteo.com *.criteo.net kit.fontawesome.com consent.cookiebot.eu consentcdn.cookiebot.eu; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com; img-src 'self' data: *.google.com *.gwallet.com *.googleapis.com *.gstatic.com *.google-analytics.com *.google.it *.googletagmanager.com *.doubleclick.net hicmobile.go2cloud.org track.hicmobile.com www.facebook.com imgsct.cookiebot.com ciphercoin.com img.sct.eu1.usercentrics.eu; frame-src 'self' *.google.com *.googletagmanager.com *.youtube.com *.doubleclick.net *.amazon-adsystem.com *.elegantthemes.com *.yousign.com *.criteo.com www.facebook.com consentcdn.cookiebot.eu app.powerbi.com sst.bbbell.it; font-src 'self' data: fonts.gstatic.com ka-p.fontawesome.com; c- strict-transport-security
max-age=31536000; includeSubDomains