nuaweb.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Next.js
Third-party hosts loaded (1)
- www.facebook.com×1
Social
Contact
- Phone
- Address
- Québec, QC, CA
Registration
- Registrar
- GoDaddy.com, LLC
- Created
- 2017-10-02
- Expires
- 2026-10-02 134 days left
- Updated
- 2026-01-10
- Name servers
-
- dane.ns.cloudflare.com
- kate.ns.cloudflare.com
DNS records live
- NS
-
- dane.ns.cloudflare.com
- kate.ns.cloudflare.com
- MX
-
- 1 aspmx.l.google.com
- 10 alt3.aspmx.l.google.com
- 10 alt4.aspmx.l.google.com
- 5 alt1.aspmx.l.google.com
- 5 alt2.aspmx.l.google.com
- Verified for
-
Email authentication partial
- SPF
-
v=spf1 mx a ip4:158.69.195.253 include:_spf.google.com ~allsoftfail (~all) - DMARC
-
v=DMARC1; p=none; aspf=r; adkim=r; rua=mailto:ded757f7aac348ffb6bafb9b6c38aa3e@dmarc-reports.cloudflare.net;policy: none (monitoring only) - DKIM
-
- google:
v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuimnRdynFfnhX5ny0jA0F22GSrE179i8oB4F6A6xP/vFb2Sl+sLGFIbX4bsfDArZ27Sp6zqWGNAvJOns… - dkim:
v=DKIM1;k=rsa;t=s;s=email;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IdmmuWWMNlKNlqcVkGpQx2R+s/FUsozOJ/tTzrMX23/AVSzl1jY18g5wz6iGCEG8UrR…
selectors probed - google:
Certificate (current)
WE1
Expires in 77 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
strict-origin-when-cross-origin- x-frame-options
SAMEORIGIN- permissions-policy
camera=(), microphone=(), geolocation=(), interest-cohort=()- x-content-type-options
nosniff- content-security-policy
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://web.squarecdn.com https://*.squarecdn.com https://js.squareup.com https://*.squareup.com https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com; script-src-elem 'self' 'unsafe-inline' https://web.squarecdn.com https://*.squarecdn.com https://js.squareup.com https://*.squareup.com https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://web.squarecdn.com https://*.squarecdn.com https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://web.squarecdn.com https://*.squarecdn.com https://fonts.googleapis.com; img-src 'self' data: https: blob:; font-src 'self' data: https://web.squarecdn.com https://*.squarecdn.com https://d1g145x70srn7h.cloudfront.net https://fonts.gstatic.com; connect-src 'self' https://pci-connect.squareup.com https://pci-connect.squareupsandbox.com ht- strict-transport-security
max-age=63072000; includeSubDomains; preload
Links to (5)
- facebook.com×2
- instagram.com×2
- linkedin.com×2
- x.com×2
- youtube.com×2