https://umkdd.com/

Submitted URL:
https://umkdd.com/
Report Finished:

Risks · 0 found

  • No classification

Security Headers · 10 found

NameValueSupportInfo
Strict-Transport-Securitymax-age=0; includeSubDomains; preloadGoodDeclare that a website is only accessible over a secure connection (HTTPS).

Click to learn more...
X-Frame-OptionsDENYGoodIndicate whether a browser should be allowed to render a page in a <frame>, <iframe>, <embed> or <object>.

Click to learn more...
X-Content-Type-OptionsnosniffGoodIndicate that the MIME types advertised in the Content-Type headers should be followed and not be changed.

Click to learn more...
Content-Security-Policydefault-src 'self'; ; script-src 'self' 'nonce-6863e0a7-96d6-4d93-a974-96bc2b6498e4'; style-src 'self' 'nonce-6863e0a7-96d6-4d93-a974-96bc2b6498e4'GoodControl resources the user agent is allowed to load for a given page.

Click to learn more...
Referrer-Policyno-referrer-when-downgradeGoodControl how much referrer information should be included with requests.

Click to learn more...
Clear-Site-DataGoodControl the data stored by a client browser for their origins.

Click to learn more...
X-Permitted-Cross-Domain-Policiesmaster-onlyGoodControl whether a web client such as Adobe Flash Player or Adobe Acrobat has permission to handle data across domains.

Click to learn more...
Permissions-PolicyNewAllow and deny the use of browser features in a document or iframe.

Click to learn more...
Cross-Origin-Embedder-PolicyNewConfigure embedding cross-origin resources into the document.

Click to learn more...
Cross-Origin-Opener-PolicyNewEnsure a top-level document does not share a browsing context group with cross-origin documents.

Click to learn more...
Cross-Origin-Resource-PolicyNewRequest that the browser blocks no-cors cross-origin/cross-site requests to the given resource.

Click to learn more...
X-XSS-Protection1; mode=blockDeprecatedDeprecated. Stops pages from loading when they detect reflected cross-site scripting (XSS) attacks.

Click to learn more...
Feature-Policygeolocation 'self'; microphone 'none'DeprecatedDeprecated. Replaced by the Permissions-Policy header.

Click to learn more...
Expect-CTmax-age=86400; enforceDeprecatedDeprecated. Opt in to reporting and/or enforcement of Certificate Transparency requirements.

Click to learn more...
Public-Key-Pinspin-sha256="your_pin_here"; max-age=5184000; includeSubDomainsDeprecatedDeprecated. Allows HTTPS websites to resist impersonation by attackers using mis-issued or otherwise fraudulent certificates.

Click to learn more...

Security Violations · 12 found

ViolationTypeInfo
Resource
https://umkdd.com/
Description
Refused to load the stylesheet 'https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.14.0/css/all.min.css' because it violates the following Content Security Policy directive: "style-src 'self' 'nonce-6863e0a7-96d6-4d93-a974-96bc2b6498e4'". Note that 'style-src-elem' was not explicitly set, so 'style-src' is used as a fallback.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://umkdd.com/
Description
Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self' 'nonce-6863e0a7-96d6-4d93-a974-96bc2b6498e4'". Either the 'unsafe-inline' keyword, a hash ('sha256-hdymKl7c0NDsME36hqS7AmYkK2AM4BFdxb2ZXkuazzU='), or a nonce ('nonce-...') is required to enable inline execution.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://umkdd.com/
Description
Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self' 'nonce-6863e0a7-96d6-4d93-a974-96bc2b6498e4'". Either the 'unsafe-inline' keyword, a hash ('sha256-fTy6gU7/TYmaqFCsQ6FSXbAW4VuHsdDtqwTHww3HWg0='), or a nonce ('nonce-...') is required to enable inline execution.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://umkdd.com/
Description
Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self' 'nonce-6863e0a7-96d6-4d93-a974-96bc2b6498e4'". Either the 'unsafe-inline' keyword, a hash ('sha256-d0L3iEFfNmyuHp6G/AWBShd7h94fMnJCr3VckcjWzQ4='), or a nonce ('nonce-...') is required to enable inline execution.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://umkdd.com/
Description
Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self' 'nonce-6863e0a7-96d6-4d93-a974-96bc2b6498e4'". Either the 'unsafe-inline' keyword, a hash ('sha256-AeFFSjlMRO/mt62Cm3NGs9Kkzz/ucHC8WLXvlz3aeb4='), or a nonce ('nonce-...') is required to enable inline execution. Note that hashes do not apply to event handlers, style attributes and javascript: navigations unless the 'unsafe-hashes' keyword is present.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://umkdd.com/
Description
Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self' 'nonce-6863e0a7-96d6-4d93-a974-96bc2b6498e4'". Either the 'unsafe-inline' keyword, a hash ('sha256-YWW+WCiSSqCxhoxFAyRaIr3g/H/eU3YfUxxQPAtQzZY='), or a nonce ('nonce-...') is required to enable inline execution. Note that hashes do not apply to event handlers, style attributes and javascript: navigations unless the 'unsafe-hashes' keyword is present.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://umkdd.com/
Description
Refused to apply inline style because it violates the following Content Security Policy directive: "style-src 'self' 'nonce-6863e0a7-96d6-4d93-a974-96bc2b6498e4'". Either the 'unsafe-inline' keyword, a hash ('sha256-FctpVQeZnEDlqrZcvM029AWdDVYNxpTn9TkyU2SPL5E='), or a nonce ('nonce-...') is required to enable inline execution. Note that hashes do not apply to event handlers, style attributes and javascript: navigations unless the 'unsafe-hashes' keyword is present.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Description
Refused to connect to 'https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-338TDPHBFE&cid=01721022-36fa-4cf9-8583-0a977c21264b&_u=KGDAAEADQAAAAC%7E&z=1573137174' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://umkdd.com/cdn-cgi/zaraz/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIydW1rZGQlMjIlMkMlMjJ4JTIyJTNBMC43MjM3NTg3MTc1MjUyOCUyQyUyMnclMjIlM0ExJTJDJTIyaCUyMiUzQTElMkMlMjJqJTIyJTNBNjAwJTJDJTIyZSUyMiUzQTgwMCUyQyUyMmwlMjIlM0ElMjJodHRwcyUzQSUyRiUyRnVta2RkLmNvbSUyRiUyMiUyQyUyMnIlMjIlM0ElMjIlMjIlMkMlMjJrJTIyJTNBMjQlMkMlMjJuJTIyJTNBJTIyVVRGLTglMjIlMkMlMjJvJTIyJTNBMCUyQyUyMnElMjIlM0ElNUIlNUQlN0Q=
Description
Refused to connect to 'https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&v=1&_v=j86&tid=G-338TDPHBFE&cid=01721022-36fa-4cf9-8583-0a977c21264b&_u=KGDAAEADQAAAAC%7E&z=1573137174&slf_rd=1' because it violates the following Content Security Policy directive: "default-src 'self'". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://umkdd.com/cdn-cgi/zaraz/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIydW1rZGQlMjIlMkMlMjJ4JTIyJTNBMC43MjM3NTg3MTc1MjUyOCUyQyUyMnclMjIlM0ExJTJDJTIyaCUyMiUzQTElMkMlMjJqJTIyJTNBNjAwJTJDJTIyZSUyMiUzQTgwMCUyQyUyMmwlMjIlM0ElMjJodHRwcyUzQSUyRiUyRnVta2RkLmNvbSUyRiUyMiUyQyUyMnIlMjIlM0ElMjIlMjIlMkMlMjJrJTIyJTNBMjQlMkMlMjJuJTIyJTNBJTIyVVRGLTglMjIlMkMlMjJvJTIyJTNBMCUyQyUyMnElMjIlM0ElNUIlNUQlN0Q=
Description
Refused to connect to 'https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&v=1&_v=j86&tid=G-338TDPHBFE&cid=01721022-36fa-4cf9-8583-0a977c21264b&_u=KGDAAEADQAAAAC%7E&z=1573137174&slf_rd=1' because it violates the document's Content Security Policy.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://umkdd.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
Description
Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'nonce-6863e0a7-96d6-4d93-a974-96bc2b6498e4'". Either the 'unsafe-inline' keyword, a hash ('sha256-upAVSNWp/4NAo2A1AgCKpAAOAq9+AamFa+xmuy5U7Qw='), or a nonce ('nonce-...') is required to enable inline execution.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...
Resource
https://umkdd.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
Description
Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'nonce-6863e0a7-96d6-4d93-a974-96bc2b6498e4'". Either the 'unsafe-inline' keyword, a hash ('sha256-kVGFSnf1sQZebYSmRBOBKzlbeSd2BRmRYFHZpUAkOkQ='), or a nonce ('nonce-...') is required to enable inline execution.
Content Security PolicyControl resources the user agent is allowed to load for a given page.

Click to learn more...

Certificates · 2 found

SubjectIssue dateExpiry date
umkdd.comSep 23, 2024, 22:20:38Dec 22, 2024, 22:20:37
cloudflareinsights.comNov 1, 2024, 08:16:38Jan 30, 2025, 08:16:37