nebu.it
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Next.js
- Analytics
-
- Cloudflare Insights
- Google Analytics
- Google Tag Manager
Third-party hosts loaded (6)
- cdn.sanity.io×2
- deifkwefumgah.cloudfront.net×2
- res.cloudinary.com×2
- www.google-analytics.com×2
- www.googletagmanager.com×2
- static.cloudflareinsights.com×1
Contact
- Phone
- Address
- Via Arnoldo Bellini 7, 25077, Roè Volciano, BS, IT
DNS records live
- NS
-
- dina.ns.cloudflare.com
- felicity.ns.cloudflare.com
- MX
-
- 0 nebu-it.mail.protection.outlook.com
- Verified for
-
- Microsoft 365
- Zoho
Email authentication strong
- SPF
-
v=spf1 include:turbo-smtp.com a mx ip4:94.177.168.106 include:spf.protection.outlook.com ip4:195.210.33.11 ip4:195.210.33.13 include:one.zoho.eu include:spf.mailgateway.oneam.cloud ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=quarantine; rua=mailto:info@nebu.it; ruf=mailto:info@nebu.it; fo=1; pct=30;policy: quarantine · pct=30 - DKIM
-
- selector1:
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucVjn8rV5beiHnGBKB2D1U1sz3WMUws1uL8dETOE0BeM6h9HETgqfkN3fhdHuoLL5mLw/DZ7pcA7Zc… - s1:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJc5d6Dl7KPaTm4lIpRfLFbQptJpf/ZCLzlU1kefje7JJz25F+PMpDtoKzvImQj5nYnfL9gfnvpgi/3zmN… - s2:
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLIsSKkfv3FMb47Ajfws4XDHE0hXIcHUyDR43VZXLCebwpDZqmR9pR1wBl+LTfIdVyMfuqtPAf+ioO8DVa…
selectors probed - selector1:
Certificate (current)
WE1
Expires in 43 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- cross-origin-opener-policy
- cross-origin-resource-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
camera=(), microphone=(), geolocation=()- x-content-type-options
nosniff- content-security-policy
default-src 'self' *.lfeeder.com *.leadfeeder.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.googletagmanager.com https://sc.lfeeder.com *.lfeeder.com *.leadfeeder.com https://*.google-analytics.com https://cookiehub.net https://*.cookiehub.net https://cdn.cookiehub.eu https://*.cookiehub.eu https://www.clarity.ms https://*.clarity.ms https://static.cloudflareinsights.com https://va.vercel-scripts.com; script-src-elem 'self' 'unsafe-inline' blob: https://*.googletagmanager.com https://*.google-analytics.com https://analytics.ahrefs.com https://sc.lfeeder.com *.lfeeder.com *.leadfeeder.com https://cookiehub.net https://*.cookiehub.net https://cdn.cookiehub.eu https://*.cookiehub.eu https://www.clarity.ms https://*.clarity.ms https://static.cloudflareinsights.com https://va.vercel-scripts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.cookiehub.eu https://*.cookiehub.eu; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.c- strict-transport-security
max-age=63072000; includeSubDomains; preload- cross-origin-opener-policy
same-origin- cross-origin-resource-policy
same-site