https://www.sgs.com/en-us/certified-clients-and-products/certified-client-directory

ID da verificação: e56fc5e1-9be5-433a-8f95-216ca035070eConcluído
URL enviado:: https://www.sgs.com/en-us/certified-clients-and-products/certified-client-directory
Relatório concluído:: 27 de abr. de 2025, 10:24:35Público

Cookies · 2 encontrado(s)

Cookies são pequenos arquivos de texto armazenados no dispositivo de um usuário, frequentemente usados para lembrar as preferências do usuário e permitir experiências personalizadas

Nome	Valor	Domínio	Caminho	Expira em (UTC)	Seguro	Somente HTTP
AKA_A2	A	.sgs.com	/	27 de abr. de 2025, 11:24:43	Sim	Sim
OptanonConsent	isGpcEnabled=0&datestamp=Sun+Apr+27+2025+10%3A24%3A46+GMT%2B0000+(Coordinated+Universal+Time)&version=202503.2.0&browserGpcFlag=0&isIABGlobal=false&consentId=10f990d3-cd5d-4bd8-a90a-b6eac14e1d58&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.sgs.com%2Fen-us%2Fcertified-clients-and-products%2Fcertified-client-directory&groups=C0003%3A0%2CC0001%3A1%2CC0004%3A0%2CC0002%3A0&hosts=H3%3A1%2CH37%3A1%2CH18%3A0%2CH4%3A0%2CH22%3A0%2CH7%3A0%2CH11%3A0&genVendors=	.www.sgs.com	/	24 de out. de 2025, 10:24:46	Não	Não

Variáveis JavaScript · 70 encontrada(s)

Variáveis JavaScript globais carregadas no objeto janela de uma página são variáveis declaradas fora das funções e acessíveis de qualquer lugar no código dentro do escopo atual

Nome	Tipo
0	object
1	object
2	object
3	object
4	object
onbeforetoggle	object
documentPictureInPicture	object
onpageswap	object
onpagereveal	object
onscrollend	object

Mensagens de registro do console · 26 encontrada(s)

Mensagens registradas no console web

Nível	Origem	Mensagem
error	security	URL https://www.sgs.com/en-us/certified-clients-and-products/certified-client-directory Texto Refused to load the font 'https://static.cloud.coveo.com/searchui/v2.10116/0/fonts/lato.woff2' because it violates the following Content Security Policy directive: "font-src 'self' data: .googleapis.com .gstatic.com .hotjar.com .hotjar.io *.smooch.io jobpal-sm.s3.amazonaws.com res.leadoo.com".
error	security	URL https://www.sgs.com/en-us/certified-clients-and-products/certified-client-directory Texto Refused to load the font 'https://staticdev.cloud.coveo.com/searchui/v2.10116/0/fonts/lato.woff2' because it violates the following Content Security Policy directive: "font-src 'self' data: .googleapis.com .gstatic.com .hotjar.com .hotjar.io *.smooch.io jobpal-sm.s3.amazonaws.com res.leadoo.com".
error	security	URL https://www.sgs.com/en-us/certified-clients-and-products/certified-client-directory Texto Refused to load the font 'https://static.cloud.coveo.com/searchui/v2.10116/0/fonts/lato.woff' because it violates the following Content Security Policy directive: "font-src 'self' data: .googleapis.com .gstatic.com .hotjar.com .hotjar.io *.smooch.io jobpal-sm.s3.amazonaws.com res.leadoo.com".
error	security	URL https://www.sgs.com/en-us/certified-clients-and-products/certified-client-directory Texto Refused to load the font 'https://staticdev.cloud.coveo.com/searchui/v2.10116/0/fonts/lato.woff' because it violates the following Content Security Policy directive: "font-src 'self' data: .googleapis.com .gstatic.com .hotjar.com .hotjar.io *.smooch.io jobpal-sm.s3.amazonaws.com res.leadoo.com".
error	security	URL https://www.googletagmanager.com/ Texto Refused to frame 'https://www.googletagmanager.com/' because it violates the following Content Security Policy directive: "frame-src 'self' tools.eurolandir.com .google.com youtu.be .sgs.com .youtube.com .youtube-nocookie.com .hotjar.com .sgs.com .sgs.pl .sgsgroup.com.cn .hotjar.com .hotjar.io .smooch.io .doubleclick.net .linkedin.com .facebook.com connect.facebook.net .leadoo.com https://www.recaptcha.net .doubleclick.net https://.acast.com .spotify.com https://view.genial.ly .baidu.com https://challenges.cloudflare.com .flippingbook.com .sgsonline.com.cn .genially.com".
warning	other	URL https://www.googletagmanager.com/gtm.js?id=GTM-MMR923M Texto Failed to execute 'postMessage' on 'DOMWindow': The target origin provided ('https://www.googletagmanager.com') does not match the recipient window's origin ('null').
warning	other	URL https://www.googletagmanager.com/gtm.js?id=GTM-MMR923M Texto Failed to execute 'postMessage' on 'DOMWindow': The target origin provided ('https://www.googletagmanager.com') does not match the recipient window's origin ('null').
warning	other	URL https://www.googletagmanager.com/gtm.js?id=GTM-MMR923M Texto Failed to execute 'postMessage' on 'DOMWindow': The target origin provided ('https://www.googletagmanager.com') does not match the recipient window's origin ('null').
warning	other	URL https://www.googletagmanager.com/gtm.js?id=GTM-MMR923M Texto Failed to execute 'postMessage' on 'DOMWindow': The target origin provided ('https://www.googletagmanager.com') does not match the recipient window's origin ('null').
warning	other	URL https://www.googletagmanager.com/gtm.js?id=GTM-MMR923M Texto Failed to execute 'postMessage' on 'DOMWindow': The target origin provided ('https://www.googletagmanager.com') does not match the recipient window's origin ('null').

Cabeçalhos de segurança · 6 encontrado(s)

Cabeçalhos de resposta HTTP que podem aumentar a segurança de um aplicativo web

Nome	Valor	Suporte	Info
Strict-Transport-Security	max-age=86400	Bom	Declarar que um site só pode ser acessado por meio de uma conexão segura (HTTPS). Clique para saber mais...
X-Frame-Options	SAMEORIGIN	Bom	Indicar se um navegador deve ter permissão para renderizar uma página em <frame>, <iframe>, <embed> ou <object>. Clique para saber mais...
X-Content-Type-Options	nosniff	Bom	Indicar que os tipos MIME anunciados nos cabeçalhos Content-Type devem ser seguidos e não alterados. Clique para saber mais...
Content-Security-Policy	default-src 'self' 'unsafe-inline' .coveo.com .google-analytics.com .google.com .googletagmanager.com .imgix.net .leadoo.com .sgs.com .sgsgroup.com.cn cdn.cookielaw.org cdn.jsdelivr.net f7132108c1tst-store.occa.ocs.oraclecloud.com1 fonts.googleapis.com jobpal-sm.s3.amazonaws.com pagead2.googlesyndication.com; font-src 'self' data: .googleapis.com .gstatic.com .hotjar.com .hotjar.io .smooch.io jobpal-sm.s3.amazonaws.com res.leadoo.com; script-src* 'self' 'unsafe-inline' 'unsafe-eval' .baidu.com .beyondwords.io .cloudfront.net .cookielaw.org .coveo.com .doubleclick.net .eloqua.com .en25.com .facebook.com .google-analytics.com .google.com .googleadservices.com .googleanalytics.com .googleoptimize.com .googletagmanager.com .gstatic.com .hotjar.com .hotjar.io .leadoo.com .mapbox.com .sgsmall.com.cn .sgsonline.com.cn .smooch.io .storerocket.io .youtube.com cdn.jsdelivr.net https://challenges.cloudflare.com https://connect.facebook.net https://content.linkedin.com https://maps.googleapis.com https://platform.linkedin.com https://snap.licdn.com https://static-exp1.licdn.com https://storemapper-herokuapp-com.global.ssl.fastly.net https://unpkg.com https://www.recaptcha.net https://www.storemapper.co jobpal-sm.s3.amazonaws.com pagead2.googlesyndication.com s.go-mpulse.net; style-src* 'self' 'unsafe-inline' .google.com https://fonts.googleapis.com jobpal-sm.s3.amazonaws.com .leadoo.com .sgs-next.com .coveo.com https://maps.googleapis.com .cloudfront.net; frame-src* 'self' tools.eurolandir.com .google.com youtu.be .sgs.com .youtube.com .youtube-nocookie.com .hotjar.com .sgs.com .sgs.pl .sgsgroup.com.cn .hotjar.com .hotjar.io .smooch.io .doubleclick.net .linkedin.com .facebook.com connect.facebook.net .leadoo.com https://www.recaptcha.net .doubleclick.net https://.acast.com .spotify.com https://view.genial.ly .baidu.com https://challenges.cloudflare.com .flippingbook.com .sgsonline.com.cn .genially.com; child-src 'self' .youtube-nocookie.com .youtube.com v.qq.com .google.com .sgs.com .facebook.com connect.facebook.net; frame-ancestors* 'self' .googletagmanager.com .sgs.com .sgs.pl .flippingbook.com; connect-src 'self' .sgsgroup.com.cn .sgs.com .sgs-next.com f7132108c1tst-store.occa.ocs.oraclecloud.com cdn.cookielaw.org .leadoo.com anl.leadoo.com pagead2.googlesyndication.com .google-analytics.com .google.com .doubleclick.net privacyportal-de.onetrust.com .go-mpulse.net jobpal-sm.s3.amazonaws.com .hotjar.com .hotjar.io wss://ws.hotjar.com .smooch.io .googletagmanager.com .linkedin.com .licdn.com .facebook.com connect.facebook.net .akstat.io https://cdn.linkedin.oribi.io https://geolocation.onetrust.com .coveo.com https://.beyondwords.io https://maps.googleapis.com .cloudfront.net .flippingbook.com .sgsonline.com.cn storerocket.io .mapbox.com; img-src 'self' data: .sgsgroup.com.cn .sgs.com .sgs-next.com .imgix.net .leadoo.com .eloqua.com i.ytimg.com cdn.cookielaw.org .cdninstagram.com .hotjar.com .hotjar.io .doubleclick.net .smooch.io .gstatic.com .linkedin.com .licdn.com p.adsymptotic.com .facebook.com .facebook.net .fbcdn.net .google.com .googlesyndication.com .googletagmanager.com .google-analytics.com .baidu.com .cpsc.gov .productsafety.gov.au ec.europa.eu https://maps.googleapis.com .cloudfront.net .sgsonline.com.cn .google.ca .google.de .google.pl .google.co.in .google.es .google.nl .google.be .google.com.hk .google.com.au .google.com.br .google.co.za .google.ae .google.com.co .google.com.pe .google.com.sg .google.ch .google.com.tr .google.co.id .google.pt .google.hu .google.ro .google.co.uk .google.co.th .google.fr .google.com.tw .google.com.my .google.com.mx .google.co.nz .storerocket.io; worker-src* 'self' https: blob:; media-src 'self' blob: media.licdn.com .cloudfront.net; form-action* 'self' *.facebook.com connect.facebook.net;	Bom	Controlar os recursos que o agente do usuário pode carregar para uma determinada página. Clique para saber mais...
Referrer-Policy	strict-origin-when-cross-origin	Bom	Controlar a quantidade de informações de referência que devem ser incluídas nas solicitações. Clique para saber mais...
Clear-Site-Data	—	Bom	Controlar os dados armazenados por um navegador cliente quanto às suas origens. Clique para saber mais...
X-Permitted-Cross-Domain-Policies	—	Bom	Controlar se um cliente web, como Adobe Flash Player ou Adobe Acrobat, tem permissão para controlar dados entre domínios. Clique para saber mais...
Permissions-Policy	—	Recente	Permitir e negar o uso de recursos do navegador em um documento ou iframe. Clique para saber mais...
Cross-Origin-Embedder-Policy	—	Recente	Configurar a incorporação de recursos de origem cruzada no documento. Clique para saber mais...
Cross-Origin-Opener-Policy	—	Recente	Garantir que um documento de nível superior não compartilhe um grupo de contexto de navegação com documentos de origem cruzada. Clique para saber mais...
Cross-Origin-Resource-Policy	—	Recente	Solicitar que o navegador bloqueie solicitações de origem cruzada/entre sites no-cors para o recurso fornecido. Clique para saber mais...
X-XSS-Protection	1; mode=block	Descontinuado	Descontinuado Impede o carregamento de páginas quando detectam ataques refletidos de cross-site scripting (XSS). Clique para saber mais...
Feature-Policy	—	Descontinuado	Descontinuado Substituído pelo cabeçalho Permissions-Policy. Clique para saber mais...
Expect-CT	—	Descontinuado	Descontinuado Optar por relatar e/ou aplicar requisitos de transparência de certificados. Clique para saber mais...
Public-Key-Pins	—	Descontinuado	Descontinuado Permitir que sites HTTPS resistam à falsificação de invasores usando certificados emitidos incorretamente ou fraudulentos. Clique para saber mais...

A interface PerformanceNavigationTiming fornece métricas relacionadas aos eventos de navegação de documentos do navegador

Processar evento não carregado

Evento	Tempo (ms)
unloadEventStart	0
unloadEventEnd	0

Redirecionar

Evento	Tempo (ms)
redirectStart	0
redirectEnd	0

Inicialização do Service Worker

Evento	Tempo (ms)
workerStart	0

Evento de busca do Service Worker

Evento	Tempo (ms)
fetchStart	0

DNS

Evento	Tempo (ms)
domainLookupStart	0
domainLookupEnd	0

TCP

Evento	Tempo (ms)
connectStart	56
secureConnectionStart	65
connectEnd	151

Solicitação

Evento	Tempo (ms)
requestStart	151

Resposta

Evento	Tempo (ms)
responseStart	343
responseEnd	385

Processamento

Evento	Tempo (ms)
domInteractive	594
domContentLoadedEventStart	1098
domContentLoadedEventEnd	1099
domComplete	5135

Carregar

Evento	Tempo (ms)
loadEventStart	5139
loadEventEnd	5140