掃描 ID：
0d1e1b08-d9db-4caa-b159-1273e5b65b54已完成
已提交的 URL：
https://www.nccgroup.com/已重新導向
報告完成時間：

Cookie · 找到 7 個

Copy link

Cookie 是儲存在使用者裝置上的小型文字檔，通常用來記住使用者喜好設定並實現個人化體驗

名稱價值網域路徑到期 (UTC)安全僅 HTTP
ncc_langENwww.nccgroup.com/是是
visid_incap_2304533z31yUDhWQdKZo94RxzOb0wNoOGcAAAAAQUIPAAAAAAABnCs8z+xA/LyFO84q+p1B.nccgroup.com/是是
nlbi_2304533WpqYRWSn6X8RnomJAs5NTgAAAADhdlVQxYKa4qk2b4Wtl/nJ.nccgroup.com/是是
ncc_countryUSwww.nccgroup.com/是是
.AspNetCore.Antiforgery.cdV5uW_EjgcCfDJ8LD82gakNFZEnW5q21H6sm_NHhfuy0M30eHn3q_AAghxl7E5b-mk5nrak6DAY_0UKAy_9IUa1H4ed6MobF_0m_4D9sGjhOoW6ggqCM3pxdvRHcb9tlqcq1eXpOCZpAVn_ESCAY1GjefmF0h0W9q6eTswww.nccgroup.com/是是
incap_ses_255_2304533lAAEAEkJKXP1ISvNVPGJAwVoOGcAAAAAOv4CS9AwEvgWiZXEsrCfQw==.nccgroup.com/是否
.AspNetCore.Mvc.CookieTempDataProviderCfDJ8LD82gakNFZEnW5q21H6sm-RsREBiiVd2ob5HWb3iEqzWCkc1v7TTHLbEHdwBSGeKfjmO8kFqP75b1PZSH8Lvtuejx7KSbsYAfdPQAv1d4ScO-FKRxZSN0RMM-4fTZq7AhyWHKjR39BIRZWRrJTnBq5wuJ5xGx78UEyseugD59F6bilAGdADugSjOB35W9Wsmgwww.nccgroup.com/是是

JavaScript 變數 · 找到 18 個

Copy link

在頁面的視窗物件上載入的全域 JavaScript 變數是在函數外部宣告的變數，可從目前範圍內程式碼中的任何位置存取

名稱類型
onbeforetoggleobject
documentPictureInPictureobject
onscrollendobject
rootobject
fundefined
dataLayerobject
MathJaxobject
criticalobject
setImmediatefunction
clearImmediatefunction

主控台記錄訊息 · 找到 53 條

Copy link

記錄到 Web 主控台的訊息

Level來源Message
errorsecurity
URL
https://www.nccgroup.com/us/
Text
Refused to load the font 'https://cdn.jsdelivr.net/npm/mathjax@3/es5/output/chtml/fonts/woff-v2/MathJax_Zero.woff' because it violates the following Content Security Policy directive: "font-src *.intercomcdn.com/ https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://js.intercomcdn.com/ 'self'".
errorsecurity
URL
https://www.nccgroup.com/us/
Text
Refused to load the font 'https://cdn.jsdelivr.net/npm/mathjax@3/es5/output/chtml/fonts/woff-v2/MathJax_Main-Regular.woff' because it violates the following Content Security Policy directive: "font-src *.intercomcdn.com/ https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://js.intercomcdn.com/ 'self'".
errorsecurity
URL
https://www.nccgroup.com/us/
Text
Refused to load the font 'https://cdn.jsdelivr.net/npm/mathjax@3/es5/output/chtml/fonts/woff-v2/MathJax_Main-Bold.woff' because it violates the following Content Security Policy directive: "font-src *.intercomcdn.com/ https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://js.intercomcdn.com/ 'self'".
errorsecurity
URL
https://www.nccgroup.com/us/
Text
Refused to load the font 'https://cdn.jsdelivr.net/npm/mathjax@3/es5/output/chtml/fonts/woff-v2/MathJax_Math-Italic.woff' because it violates the following Content Security Policy directive: "font-src *.intercomcdn.com/ https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://js.intercomcdn.com/ 'self'".
errorsecurity
URL
https://www.nccgroup.com/us/
Text
Refused to load the font 'https://cdn.jsdelivr.net/npm/mathjax@3/es5/output/chtml/fonts/woff-v2/MathJax_Main-Italic.woff' because it violates the following Content Security Policy directive: "font-src *.intercomcdn.com/ https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://js.intercomcdn.com/ 'self'".
errorsecurity
URL
https://www.nccgroup.com/us/
Text
Refused to load the font 'https://cdn.jsdelivr.net/npm/mathjax@3/es5/output/chtml/fonts/woff-v2/MathJax_Math-BoldItalic.woff' because it violates the following Content Security Policy directive: "font-src *.intercomcdn.com/ https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://js.intercomcdn.com/ 'self'".
errorsecurity
URL
https://www.nccgroup.com/us/
Text
Refused to load the font 'https://cdn.jsdelivr.net/npm/mathjax@3/es5/output/chtml/fonts/woff-v2/MathJax_Size1-Regular.woff' because it violates the following Content Security Policy directive: "font-src *.intercomcdn.com/ https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://js.intercomcdn.com/ 'self'".
errorsecurity
URL
https://www.nccgroup.com/us/
Text
Refused to load the font 'https://cdn.jsdelivr.net/npm/mathjax@3/es5/output/chtml/fonts/woff-v2/MathJax_Size2-Regular.woff' because it violates the following Content Security Policy directive: "font-src *.intercomcdn.com/ https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://js.intercomcdn.com/ 'self'".
errorsecurity
URL
https://www.nccgroup.com/us/
Text
Refused to load the font 'https://cdn.jsdelivr.net/npm/mathjax@3/es5/output/chtml/fonts/woff-v2/MathJax_Size3-Regular.woff' because it violates the following Content Security Policy directive: "font-src *.intercomcdn.com/ https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://js.intercomcdn.com/ 'self'".
errorsecurity
URL
https://www.nccgroup.com/us/
Text
Refused to load the font 'https://cdn.jsdelivr.net/npm/mathjax@3/es5/output/chtml/fonts/woff-v2/MathJax_Size4-Regular.woff' because it violates the following Content Security Policy directive: "font-src *.intercomcdn.com/ https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://js.intercomcdn.com/ 'self'".

安全標頭 · 找到 5 個

Copy link

可增強 Web 應用程式安全性的 HTTP 回應標頭

瞭解更多...
名稱價值支援資訊
Strict-Transport-Securitymax-age=2592000良性宣佈僅可透過安全連線 (HTTPS) 存取網站。

按一下以瞭解更多...
X-Frame-OptionsSameOrigin良性表明是否應允許瀏覽器在 <frame>、<iframe>、<embed> 或 <object> 中呈現頁面。

按一下以瞭解更多...
X-Content-Type-Optionsnosniff良性表明應遵循在 Content-Type 標頭中公告的 MIME 類型，不得變更。

按一下以瞭解更多...
Content-Security-Policyimg-src *.analytics.google.com/ *.bing.com/ *.doubleclick.net/ *.flippingbook.com *.googleadservices.com *.intercomcdn.com/ *.vimeocdn.com/ data: https://*.clarity.ms https://*.google-analytics.com/ https://d17lvj5xn8sco6.cloudfront.net https://downloads.intercomcdn.com https://i.ytimg.com/ https://logws1309.ati-host.net/ https://o.twimg.com https://pbs.twimg.com/ https://px.ads.linkedin.com https://ssl.gstatic.com https://static.intercomassets.com/ https://syndication.twitter.com https://www.buzzsprout.com/ https://www.google.co.uk https://www.google.com/ 'self' www.googletagmanager.com www.linkedin.com; connect-src *.analytics.google.com/ *.doubleclick.net/ *.flippingbook.com *.googleadservices.com *.googlesyndication.com/ apikeys.civiccomputing.com data: https://*.clarity.ms https://*.google-analytics.com/ https://*.in.applicationinsights.azure.com https://adservice.google.com/ https://api-iam.intercom.io/ https://cdn.linkedin.oribi.io https://js.zi-scripts.com/unified/v1/master/getSubscriptions https://nexus-websocket-a.intercom.io/ https://nexus-websocket-b.intercom.io/ https://px.ads.linkedin.com https://ws.zoominfo.com/ https://www.google.co.uk https://www.google.com/ 'self' wss://nexus-websocket-a.intercom.io/ wss://nexus-websocket-b.intercom.io/; script-src *.doubleclick.net/ *.flippingbook.com *.googleadservices.com *.intercom.io *.vimeo.com *.youtube.com *.youtube-nocookie.com cdn.jsdelivr.net cdnjs.cloudflare.com https://*.clarity.ms https://*.google-analytics.com/ https://ajax.googleapis.com https://apis.google.com https://cc.cdn.civiccomputing.com https://d33i2vgywgme2s.cloudfront.net https://js.intercomcdn.com/ https://js.monitor.azure.com https://js.zi-scripts.com/zi-tag.js https://logws1309.ati-host.net/ https://platform.twitter.com https://snap.licdn.com/li.lms-analytics/ https://syndication.twitter.com https://vimeo.com/ https://www.google.com/recaptcha/ https://www.gstatic.com pi.pardot.com 'self' 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com; frame-src *.doubleclick.net/ *.flippingbook.com *.youtube-nocookie.com https://*.nccgroup.com/ https://export.highcharts.com/ https://intercom-sheets.com/ https://nccgroup.wavecast.io/ https://platform.twitter.com https://player.vimeo.com/ https://polaris.brighterir.com/ https://syndication.twitter.com https://videopress.com/ https://www.facebook.com/ https://www.google.com/recaptcha/ https://www.youtube.com/embed/ 'self'; default-src *.intercom.io *.vimeo.com *.vimeocdn.com/ *.youtube.com *.youtube-nocookie.com https://*.google-analytics.com/ https://pbs.twimg.com/ https://platform.twitter.com https://syndication.twitter.com 'self'; font-src *.intercomcdn.com/ https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://js.intercomcdn.com/ 'self'; frame-ancestors explore.tanium.com; style-src https://fonts.googleapis.com/ https://platform.twitter.com 'self' 'unsafe-inline'; media-src https://js.intercomcdn.com/ https://pbs.twimg.com/ https://platform.twitter.com https://syndication.twitter.com 'self'; object-src 'self'良性控制允許使用者代理程式為給定頁面載入的資源。

按一下以瞭解更多...
Referrer-Policy—良性控制要求中應包含多少推薦人資訊。

按一下以瞭解更多...
Clear-Site-Data—良性控制用戶端瀏覽器為來源伺服器儲存的資料。

按一下以瞭解更多...
X-Permitted-Cross-Domain-Policies—良性控制 Web 用戶端（例如，Adobe Flash Player 或 Adobe Acrobat）是否有權跨網域處理資料。

按一下以瞭解更多...
Permissions-Policy—新允許和拒絕在文件或 iframe 中使用瀏覽器功能。

按一下以瞭解更多...
Cross-Origin-Embedder-Policy—新設定將跨來源資源嵌入至文件中。

按一下以瞭解更多...
Cross-Origin-Opener-Policy—新確保頂層文件不會與跨來源文件共用瀏覽上下文群組。

按一下以瞭解更多...
Cross-Origin-Resource-Policy—新要求瀏覽器封鎖對給定資源的 no-cors 跨來源/跨網站要求。

按一下以瞭解更多...
X-XSS-Protection1; mode=block已棄用已棄用。偵測到反射式 Cross-site scripting (XSS) 攻擊時，阻止載入頁面。

按一下以瞭解更多...
Feature-Policy—已棄用已棄用。取代為 Permissions-Policy 標頭。

按一下以瞭解更多...
Expect-CT—已棄用已棄用。選擇加入報告和/或強制執行憑證透明度要求。

按一下以瞭解更多...
Public-Key-Pins—已棄用已棄用。允許 HTTPS 網站抵制攻擊者使用錯誤核發或詐騙性憑證進行假冒。

按一下以瞭解更多...

PerformanceNavigationTiming

Copy link

PerformanceNavigationTiming 介面提供了有關瀏覽器文件導覽事件的指標

瞭解更多...

處理卸載事件

活動時間（毫秒）
unloadEventStart0
unloadEventEnd0

重新導向

活動時間（毫秒）
redirectStart1
redirectEnd544

Service Worker Init

活動時間（毫秒）
workerStart0

Service Worker Fetch 事件

活動時間（毫秒）
fetchStart544

DNS

活動時間（毫秒）
domainLookupStart544
domainLookupEnd544

TCP

活動時間（毫秒）
connectStart544
secureConnectionStart544
connectEnd544

請求

活動時間（毫秒）
requestStart548

回應

活動時間（毫秒）
responseStart631
responseEnd661

正在處理

活動時間（毫秒）
domInteractive1813
domContentLoadedEventStart1813
domContentLoadedEventEnd1834
domComplete1855

負載

活動時間（毫秒）
loadEventStart1855
loadEventEnd1858