Security Report Summary
A
| Site: | https://cyberint.com/ | ||
|---|---|---|---|
| IP Address: | 141.193.213.11 | ||
| Report Time: | 06 May 2024 11:37:57 UTC | ||
| Headers: |
|
||
| Warning: | Grade capped at A, please see warnings below. | ||
| Advanced: |
|
Warnings
| Content-Security-Policy | This policy contains 'unsafe-inline' which is dangerous in the script-src directive. This policy contains 'unsafe-eval' which is dangerous in the script-src directive. This policy contains 'unsafe-inline' which is dangerous in the default-src directive. |
|---|
Raw Headers
| HTTP/2 | 200 |
|---|---|
| date | Mon, 06 May 2024 11:37:57 GMT |
| content-type | text/html; charset=UTF-8 |
| vary | Accept-Encoding |
| vary | Accept-Encoding |
| vary | Accept-Encoding |
| vary | Accept-Encoding,Cookie |
| link | <https://cyberint.com/>; rel=shortlink |
| x-powered-by | WP Engine |
| x-cacheable | SHORT |
| cache-control | max-age=600, must-revalidate |
| x-cache | HIT: 1 |
| x-cache-group | normal |
| content-security-policy | connect-src api.hubapi.com api.hubspot.com cta-service-cms2.hubspot.com forms.hscollectedforms.net px.ads.linkedin.com snid.snitcher.com w.clarity.ms www.google-analytics.com bat.bing.com content.hotjar.io forms.hsforms.com js.hs-banner.com region1.google-analytics.com v.clarity.ms ws.zoominfo.com wss://ws.hotjar.com 'self' adservice.google.com data: www.facebook.com x.clarity.ms yoast.com metrics.hotjar.io j.clarity.ms q.clarity.ms r.clarity.ms vc.hotjar.io y.clarity.ms z.clarity.ms 1531320666.rsc.cdn77.org a.clarity.ms b.clarity.ms d.clarity.ms e.clarity.ms f.clarity.ms h.clarity.ms hubspot-forms-static-embed.s3.amazonaws.com i.clarity.ms k.clarity.ms l.clarity.ms m.clarity.ms my.yoast.com n.clarity.ms o.clarity.ms p.clarity.ms s.clarity.ms t.clarity.ms u.clarity.ms google.com cookie-cdn.cookiepro.com geolocation.onetrust.com beaconapi.helpscout.net cdn.linkedin.oribi.io d3hb14vkzrxvla.cloudfront.net distillery.wistia.com exceptions.hubspot.com fast.wistia.com g.clarity.ms in.hotjar.com infragrid.v.network maps.googleapis.com static.hsappstatic.net translate-pa.googleapis.com translate.googleapis.com www.clarity.ms analytics.google.com analytics.propensity.com scout.salesloft.com stats.g.doubleclick.net www.google.com.hk; font-src 'self' data: fonts.gstatic.com chrome-extension cyberint.com fast.wistia.com; img-src 'self' bat.bing.com data: forms-na1.hsforms.com forms.hsforms.com perf-na1.hsforms.com px.ads.linkedin.com track.hubspot.com www.facebook.com www.google.co.il www.google.com analytics.twitter.com t.co tr-rc.lfeeder.com www.google.co.uk adservice.google.com www.google-analytics.com ps.w.org s.w.org secure.gravatar.com c.clarity.ms cyberintdev.wpengine.com i.ytimg.com no-cache.hubspot.com blob: c.bing.com cdn.honey.io fonts.gstatic.com region1.google-analytics.com translate.google.com www.google.az www.google.bg www.google.ca www.google.cl www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.co.nz www.google.co.th www.google.com.au www.google.com.ec www.google.com.eg www.google.com.hk www.google.com.my www.google.com.ph www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.de www.google.dz www.google.es www.google.fi www.google.fr www.google.hu www.google.it www.google.mk www.google.mu www.google.no www.google.pl www.google.ro www.google.se www.google.tm www.googletagmanager.com perf.hsforms.com www.google.ae www.google.at www.google.com.bh www.google.com.pk www.google.dk www.google.lk www.google.nl www.google.ru www.google.ch www.google.com.bd www.google.com.gh www.google.com.kw www.google.com.mt www.google.cz www.google.hr cookie-cdn.cookiepro.com www.google.ie www.google.com.br www.linkedin.com 2034462.fs1.hubspotusercontent-na1.net [fdbd:dc05:ff:ff:88c6:e7e0:1f15:b25b]:9271 cta-service-cms2.hubspot.com e.cyberint.com embed-ssl.wistia.com exceptions.hs-embed-reporting.com fast.wistia.com i.vimeocdn.com maps.gstatic.com pd.w.org plugin.wpforms.com px4.ads.linkedin.com stats.sa-as.com translate.googleapis.com www.comeet.co www.google.com.co www.google.com.mx www.google.com.pe www.google.com.sv www.google.rs www.gstatic.com yastatic.net scout.us2.salesloft.com; script-src-elem 'self' 'unsafe-inline' bat.bing.com connect.facebook.net googleads.g.doubleclick.net js-na1.hs-scripts.com js.hsforms.net sc.lfeeder.com snap.licdn.com static.ads-twitter.com static.hotjar.com www.clarity.ms www.googletagmanager.com cdn.jsdelivr.net js.hs-analytics.net js.hs-banner.com js.hsadspixel.net js.hscollectedforms.net js.hubspot.com js.usemessages.com script.hotjar.com snid.snitcher.com ws.zoominfo.com www.google-analytics.com cdnjs.cloudflare.com js.hs-scripts.com www.google.com www.gstatic.com www.comeet.co www.youtube.com app.hubspot.com yoast.com cta-service-cms2.hubspot.com js.hscta.net cookie-cdn.cookiepro.com apis.google.com beacon-v2.helpscout.net cdn.mxpnl.com conoret.com cyberint.com fast.wistia.com localhost:49506 maps.googleapis.com stats.sa-as.com translate-pa.googleapis.com translate.google.com translate.googleapis.com static.ads-twitter.com cdn.propensity.com js.hsleadflows.net okt.to scout-cdn.salesloft.com script.crazyegg.com static.oktopost.com www.googleoptimize.com; script-src 'unsafe-eval' 'self' js.hsforms.net 'unsafe-inline' bat.bing.com cdn.jsdelivr.net connect.facebook.net googleads.g.doubleclick.net js-na1.hs-scripts.com js.hs-analytics.net js.hs-banner.com js.hsadspixel.net js.hscollectedforms.net js.hubspot.com js.usemessages.com sc.lfeeder.com script.hotjar.com snap.licdn.com snid.snitcher.com static.ads-twitter.com static.hotjar.com wasm-eval ws.zoominfo.com www.clarity.ms www.comeet.co www.google-analytics.com www.googletagmanager.com www.youtube.com cdnjs.cloudflare.com cookie-cdn.cookiepro.com cta-service-cms2.hubspot.com js.hs-scripts.com stats.sa-as.com www.google.com; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com wowjs.uk cdn.honey.io cyberint.com www.comeet.com www.gstatic.com; frame-src app.hubspot.com td.doubleclick.net forms.hsforms.com static.hsappstatic.net player.vimeo.com www.google.com www.comeet.co www.youtube-nocookie.com www.youtube.com maxblockpage.service.anz www.googletagmanager.com 'self' 2034462.hs-sites.com blob: feedback-pa.clients6.google.com gateway.zscloud.net hysafeweb.skhynix.com l.cyberint.com mozbar.moz.com ransomania.cyberint.com vars.hotjar.com wp-rocket.me www.facebook.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.gstatic.com wowjs.uk; form-action forms.hsforms.com 'self' webto.salesforce.com www.facebook.com; worker-src blob: 'self'; script-src-attr 'unsafe-inline'; child-src app.hubspot.com www.comeet.co www.youtube.com; default-src 'self' 'unsafe-inline' adservice.google.com analytics.twitter.com api.hubspot.com app.hubspot.com b.clarity.ms bat.bing.com c.clarity.ms cdn.jsdelivr.net connect.facebook.net content.hotjar.io cta-service-cms2.hubspot.com data: fonts.googleapis.com fonts.gstatic.com forms-na1.hsforms.com forms.hscollectedforms.net forms.hsforms.com googleads.g.doubleclick.net hubspot-forms-static-embed.s3.amazonaws.com js-na1.hs-scripts.com js.hs-analytics.net js.hs-banner.com js.hsadspixel.net js.hscollectedforms.net js.hsforms.net js.hubspot.com js.usemessages.com no-cache.hubspot.com perf-na1.hsforms.com px.ads.linkedin.com region1.google-analytics.com sc.lfeeder.com script.hotjar.com secure.gravatar.com snap.licdn.com snid.snitcher.com static.ads-twitter.com static.hotjar.com t.clarity.ms t.co tr-rc.lfeeder.com track.hubspot.com vc.hotjar.io ws.zoominfo.com wss://ws.hotjar.com www.clarity.ms www.facebook.com www.google-analytics.com www.google.com www.google.ie www.google.tm www.googletagmanager.com z.clarity.ms 2034462.fs1.hubspotusercontent-na1.net api.hubapi.com cyberintdev.wpengine.com perf.hsforms.com self stats.sa-as.com www.linkedin.com www.youtube.com; media-src data: blob:; prefetch-src 'self'; frame-ancestors 'self' |
| permissions-policy | autoplay=*, camera=*, cross-origin-isolated=*, display-capture=*, document-domain=*, encrypted-media=*, geolocation=*, keyboard-map=*, microphone=*, payment=*, sync-xhr=* |
| referrer-policy | strict-origin-when-cross-origin |
| strict-transport-security | max-age=31536000 |
| x-content-type-options | nosniff |
| x-frame-options | SAMEORIGIN |
| cf-cache-status | DYNAMIC |
| set-cookie | __cf_bm=r4NIkscHeYyqEMaH5eTHyW1uVT4es9QQ2K7.IEYZUZ4-1714995477-1.0.1.1-pDMC4JJKHsuieJwVRRHL1SmYK9d8dSegvlDMbAsavXWN3t.ATqv8tstLBWH37h1DzzuOuxBFEqhQ4vdaqnonaA; path=/; expires=Mon, 06-May-24 12:07:57 GMT; domain=.cyberint.com; HttpOnly; Secure; SameSite=None |
| server | cloudflare |
| cf-ray | 87f8ae64ef39f9f9-SJC |
| content-encoding | gzip |
| alt-svc | h3=":443"; ma=86400 |
Upcoming Headers
| Cross-Origin-Embedder-Policy | Cross-Origin Embedder Policy allows a site to prevent assets being loaded that do not grant permission to load them via CORS or CORP. |
|---|---|
| Cross-Origin-Opener-Policy | Cross-Origin Opener Policy allows a site to opt-in to Cross-Origin Isolation in the browser. |
| Cross-Origin-Resource-Policy | Cross-Origin Resource Policy allows a resource owner to specify who can load the resource. |
Additional Information
| x-powered-by | X-Powered-By can usually be seen with values like "PHP/5.5.9-1ubuntu4.5" or "ASP.NET". Trying to minimise the amount of information you give out about your server is a good idea. This header seems to have been altered to remove such information, but could still be removed. |
|---|---|
| content-security-policy | Content Security Policy is an effective measure to protect your site from XSS attacks. By whitelisting sources of approved content, you can prevent the browser from loading malicious assets. Analyse this policy in more detail. You can sign up for a free account on Report URI to collect reports about problems on your site. |
| permissions-policy | Permissions Policy is a new header that allows a site to control which features and APIs can be used in the browser. |
| referrer-policy | Referrer Policy is a new header that allows a site to control how much information the browser includes with navigations away from a document and should be set by all sites. |
| strict-transport-security | HTTP Strict Transport Security is an excellent feature to support on your site and strengthens your implementation of TLS by getting the User Agent to enforce the use of HTTPS. |
| x-content-type-options | X-Content-Type-Options stops a browser from trying to MIME-sniff the content type and forces it to stick with the declared content-type. The only valid value for this header is "X-Content-Type-Options: nosniff". |
| x-frame-options | X-Frame-Options tells the browser whether you want to allow your site to be framed or not. By preventing a browser from framing your site you can defend against attacks like clickjacking. |
| server | Server value has been changed. Typically you will see values like "Microsoft-IIS/8.0" or "nginx 1.7.2". |