https://iam.intralinks.com/idp/login/?applicationid=98e3df54-2ef1-48b4-82d4-02b83d273d23&hostname=services.intralinks.com

Scan ID:
25b24aa0-750b-493f-8f6b-1e01e0bb6941Finished
Submitted URL:
https://services.intralinks.com/Redirected
Report Finished:

Risks · 0 found

  • No classification

Security Headers · 3 found

NameValueSupportInfo
Strict-Transport-Securitymax-age=31536000GoodDeclare that a website is only accessible over a secure connection (HTTPS).

Click to learn more...
X-Frame-Options—GoodIndicate whether a browser should be allowed to render a page in a <frame>, <iframe>, <embed> or <object>.

Click to learn more...
X-Content-Type-OptionsnosniffGoodIndicate that the MIME types advertised in the Content-Type headers should be followed and not be changed.

Click to learn more...
Content-Security-Policydefault-src 'self' esp.aptrinsic.com web-sdk.aptrinsic.com *.aptrinsic.com; script-src 'self' *.intralinks.com 'unsafe-hashes' 'sha256-aAPtUYXCFiBKzc1PaEYGY9mzEDMgj7DnIIkitSCKEUg=' web-sdk.aptrinsic.com; style-src 'self' 'unsafe-inline' web-sdk.aptrinsic.com; script-src-elem 'self' 'sha256-aAPtUYXCFiBKzc1PaEYGY9mzEDMgj7DnIIkitSCKEUg=' web-sdk.aptrinsic.com; connect-src 'self' *.intralinks.com api-js.mixpanel.com web-sdk.aptrinsic.com esp.aptrinsic.com *.aptrinsic.com; img-src 'self' data: *.intralinks.com *.ssctech.com; object-src 'none'; frame-ancestors 'none'GoodControl resources the user agent is allowed to load for a given page.

Click to learn more...
Referrer-Policy—GoodControl how much referrer information should be included with requests.

Click to learn more...
Clear-Site-Data—GoodControl the data stored by a client browser for their origins.

Click to learn more...
X-Permitted-Cross-Domain-Policies—GoodControl whether a web client such as Adobe Flash Player or Adobe Acrobat has permission to handle data across domains.

Click to learn more...
Permissions-Policy—NewAllow and deny the use of browser features in a document or iframe.

Click to learn more...
Cross-Origin-Embedder-Policy—NewConfigure embedding cross-origin resources into the document.

Click to learn more...
Cross-Origin-Opener-Policy—NewEnsure a top-level document does not share a browsing context group with cross-origin documents.

Click to learn more...
Cross-Origin-Resource-Policy—NewRequest that the browser blocks no-cors cross-origin/cross-site requests to the given resource.

Click to learn more...
X-XSS-Protection—DeprecatedDeprecated. Stops pages from loading when they detect reflected cross-site scripting (XSS) attacks.

Click to learn more...
Feature-Policy—DeprecatedDeprecated. Replaced by the Permissions-Policy header.

Click to learn more...
Expect-CT—DeprecatedDeprecated. Opt in to reporting and/or enforcement of Certificate Transparency requirements.

Click to learn more...
Public-Key-Pins—DeprecatedDeprecated. Allows HTTPS websites to resist impersonation by attackers using mis-issued or otherwise fraudulent certificates.

Click to learn more...

Security Violations · 1 found

ViolationTypeInfo
Resource
https://iam.intralinks.com/idp/login/?applicationid=98e3df54-2ef1-48b4-82d4-02b83d273d23&hostname=services.intralinks.com
Description
Refused to load the font 'data:application/font-woff;charset=utf-8;base64,d09GRgABAAAAABWoAAsAAAAAJ9AAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABHU1VCAAABCAAAAmYAAAR2ZcBn9U9TLzIAAANwAAAAQQAAAFZWUVMIY21hcAAAA7QAAAIcAAAFnIMq5ipnbHlmAAAF0AAAC80AABVszjC1ZWhlYWQAABGgAAAANAAAADZ2zsSBaGhlYQAAEdQAAAAeAAAAJAfSBDFobXR4AAAR9AAAABcAAAE0xzj/+2xvY2EAABIMAAAAdQAAAJwYJx3EbWF4cAAAEoQAAAAfAAAAIAFjAKpuYW1lAAASpAAAATUAAAJG5xgJvXBvc3QAABPcAAAByQAAAqgIzxhUeJx9lEtyElEUhv+mm0gCJilFjRhjovEVXzF2uhuaRx4QEDJwYFkOnMSyyrKKcsQ6XIAryNAVuAAHrsAFOHDo2PK7h0ZMBuEWze3z+M9//3Mu8iT...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' because it violates the following Content Security Policy directive: "default-src 'self' esp.aptrinsic.com web-sdk.aptrinsic.com *.aptrinsic.com". Note that 'font-src' was not explicitly set, so 'default-src' is used as a fallback.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...

Certificates · 3 found

SubjectIssue dateExpiry date
services.intralinks.comFeb 13, 2024, 00:00:00Feb 12, 2025, 23:59:59
*.aptrinsic.comMar 12, 2024, 00:00:00Mar 28, 2025, 23:59:59
www.ssctech.comNov 9, 2024, 03:14:59Feb 7, 2025, 03:14:58