掃描 ID：
4c72c8d7-caf1-498f-910f-36fccbabf869已完成
已提交的 URL：
https://teck-global.com/
報告完成時間：

Cookie · 找到 1 個

Copy link

Cookie 是儲存在使用者裝置上的小型文字檔，通常用來記住使用者喜好設定並實現個人化體驗

名稱價值網域路徑到期 (UTC)安全僅 HTTP
cf_clearanceWYR08ETLLm9cgwCQOolvfAuXxnH6UPcf1rbYu7WDM.s-1737834751-1.2.1.1-EwU0iKGA2IewZjagK2Hvde9Osh7QmBQTjj1fXjwaNa1c4NxUAQ6pr.mK_0DXSrXAuFFB4keoFtokdRt_xI7tio96ZBbeum1dAfRL70gyBXsxoSOrsaiFz88FsZGcf3oaK7X6hzrQZac3frgMOeB5uv0lNcvNZ.iarbl6kzAkwxDoZ7ASs9KrF8BKKiAI38H1vD6Grchc6jou1foLi9bldnxAAIr9iHNVUrVzRBZwJ2Y9LOwzv0uSUMjxlwUAZaxRzGYpcPIzX1oq.FzhJRSwI93i4sLDv93AXvr3ss09E_Y.teck-global.com/是是

JavaScript 變數 · 找到 50 個

Copy link

在頁面的視窗物件上載入的全域 JavaScript 變數是在函數外部宣告的變數，可從目前範圍內程式碼中的任何位置存取

名稱類型
0object
onbeforetoggleobject
documentPictureInPictureobject
onscrollendobject
mi_versionstring
mi_track_userboolean
mi_no_track_reasonstring
MonsterInsightsDefaultLocationsobject
MonsterInsightsLocationsobject
disableStrsobject

主控台記錄訊息 · 找到 12 條

Copy link

記錄到 Web 主控台的訊息

Level來源Message
warningother
Text
Error with Permissions-Policy header: Origin trial controlled feature not enabled: 'interest-cohort'.
errorsecurity
URL
https://teck-global.com/
Text
Refused to load the script 'https://www.googletagmanager.com/gtag/js?id=G-EBVF60TJHM' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
errornetwork
URL
https://fonts.googleapis.com/css?family=Helvetica%3A400%2C400italic%2C700%2C700italic%2C600%2C500%7CHeebo%3A400%2C400italic%2C700%2C700italic%2C300&display=swap&ver=1.1.8
Text
Failed to load resource: the server responded with a status of 403 ()
errorsecurity
URL
https://teck-global.com/
Text
Refused to apply style from 'https://teck-global.com/wp-content/plugins/gutenverse-news/assets/fonts/jegicon/fonts/jegicon.woff?ver=1.0.4' because its MIME type ('font/woff') is not a supported stylesheet MIME type, and strict MIME checking is enabled.
errorsecurity
URL
https://teck-global.com/
Text
Refused to load the script 'https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
errorsecurity
URL
https://teck-global.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
Text
Refused to load the script 'https://cdn-cookieyes.com/client_data/c6c0403d6db09d709cd43414/script.js' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
errorsecurity
Text
Refused to load the script 'https://www.clarity.ms/tag/oh1nfjpgq2?ref=aioseo' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
errorsecurity
URL
https://teck-global.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
Text
Refused to load the script 'https://cdn-cookieyes.com/client_data/c6c0403d6db09d709cd43414/script.js' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.
errorsecurity
Text
Refused to create a worker from 'blob:https://teck-global.com/8010e84f-60d4-4f53-9781-6a169169ca42' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline' 'unsafe-eval'". Note that 'worker-src' was not explicitly set, so 'script-src' is used as a fallback.
logother
URL
https://teck-global.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Text
JQMIGRATE: Migrate is installed, version 3.4.1

安全標頭 · 找到 6 個

Copy link

可增強 Web 應用程式安全性的 HTTP 回應標頭

瞭解更多...
名稱價值支援資訊
Strict-Transport-Securitymax-age=15552000; includeSubDomains; preload良性宣佈僅可透過安全連線 (HTTPS) 存取網站。

按一下以瞭解更多...
X-Frame-Options—良性表明是否應允許瀏覽器在 <frame>、<iframe>、<embed> 或 <object> 中呈現頁面。

按一下以瞭解更多...
X-Content-Type-Optionsnosniff良性表明應遵循在 Content-Type 標頭中公告的 MIME 類型，不得變更。

按一下以瞭解更多...
Content-Security-Policyscript-src 'self' 'unsafe-inline' 'unsafe-eval'; 良性控制允許使用者代理程式為給定頁面載入的資源。

按一下以瞭解更多...
Referrer-Policyno-referrer-when-downgrade良性控制要求中應包含多少推薦人資訊。

按一下以瞭解更多...
Clear-Site-Data—良性控制用戶端瀏覽器為來源伺服器儲存的資料。

按一下以瞭解更多...
X-Permitted-Cross-Domain-Policies—良性控制 Web 用戶端（例如，Adobe Flash Player 或 Adobe Acrobat）是否有權跨網域處理資料。

按一下以瞭解更多...
Permissions-Policyinterest-cohort=()新允許和拒絕在文件或 iframe 中使用瀏覽器功能。

按一下以瞭解更多...
Cross-Origin-Embedder-Policy—新設定將跨來源資源嵌入至文件中。

按一下以瞭解更多...
Cross-Origin-Opener-Policy—新確保頂層文件不會與跨來源文件共用瀏覽上下文群組。

按一下以瞭解更多...
Cross-Origin-Resource-Policy—新要求瀏覽器封鎖對給定資源的 no-cors 跨來源/跨網站要求。

按一下以瞭解更多...
X-XSS-Protection1; mode=block已棄用已棄用。偵測到反射式 Cross-site scripting (XSS) 攻擊時，阻止載入頁面。

按一下以瞭解更多...
Feature-Policy—已棄用已棄用。取代為 Permissions-Policy 標頭。

按一下以瞭解更多...
Expect-CT—已棄用已棄用。選擇加入報告和/或強制執行憑證透明度要求。

按一下以瞭解更多...
Public-Key-Pins—已棄用已棄用。允許 HTTPS 網站抵制攻擊者使用錯誤核發或詐騙性憑證進行假冒。

按一下以瞭解更多...

PerformanceNavigationTiming

Copy link

PerformanceNavigationTiming 介面提供了有關瀏覽器文件導覽事件的指標

瞭解更多...

處理卸載事件

活動時間（毫秒）
unloadEventStart0
unloadEventEnd0

重新導向

活動時間（毫秒）
redirectStart0
redirectEnd0

Service Worker Init

活動時間（毫秒）
workerStart0

Service Worker Fetch 事件

活動時間（毫秒）
fetchStart1

DNS

活動時間（毫秒）
domainLookupStart1
domainLookupEnd1

TCP

活動時間（毫秒）
connectStart142
secureConnectionStart149
connectEnd161

請求

活動時間（毫秒）
requestStart162

回應

活動時間（毫秒）
responseStart634
responseEnd677

正在處理

活動時間（毫秒）
domInteractive1405
domContentLoadedEventStart1420
domContentLoadedEventEnd1422
domComplete2009

負載

活動時間（毫秒）
loadEventStart2009
loadEventEnd2012