Domain History

www.cybersechub.hk

Grade B · 72/100 · 4/7 security headers present

Security Score

72/ 100

Security Headers

4/ 7

CSP Violations

NoViolations

Issues Found

12Issues

Recommendations

4Available

Security

72 / 100

Good security foundation but some CSP hardening recommended.

Compliance

59 / 100

Several compliance gaps found in CSP implementation.

Best Practices

35 / 100

Few best practices adopted — significant room for improvement.

CSP Analysis

Content Security PolicyLOW

default-src 'self' ; script-src 'self' 'sha256-m4ZZEQtij0fkZUrXq2l1e09qtFW6wJiAwTSqOJxhOvo=' 'sha256-WiWunkkjgdWn+gyHKieSULEzEPvFZknjzlBBGKFsXpQ=' googleads.g.doubleclick.net www.googletagmanager.com www.google.com www.gstatic.com www.google-analytics.com; style-src 'self' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-46h3ZXhVBM4m14HmYWt7mosUwvxdu3LV0KBSok+yCdk=' 'sha256-98fF2xFvqKp6gU2brd/+3TNklH3mT9CegihYPP22ECE=' 'sha256-m+RBWWFk9MmdWEKGmOpGdgLdsjJFAa88Ne4Oy2Jb1PA=' 'sha256-pVYk9IKmtN7+MXDyb+r5yCk4ps4QFIAuViq2t9/VRlc=' 'sha256-mApZctEX6h6upxWzcTBDes/Dvl3wLvkOM5CD4H2XyYY=' 'sha256-D4ODAglf3fPJNsPVN+Eoo8tpM3kQ16HSpa6qxDyxtBo=' 'sha256-ilqL3Cnth11uQjKbIkaMC9ZuBT7z2jC+wX8Hi7HpP64=' 'sha256-f6YFv6r0sEew0F9GZ2cX1JpBNb5cenNGWo7erWfYiB0=' 'sha256-DuK10BpKOYN8o8XkRGNQ3BmMA5/Sz2P5yN+VoqLntRw=' 'sha256-B86VC+s4QNSXqDTH2ns+VBWvIcI6WdihpDKXLULZedA=' 'sha256-6AYdNCisBC5L0G+FNGVbFmcFw6y4WorvE/syEaiFBuM=' 'sha256-fKzoElq0W/MJ4lISP6uVXHUwAJ10VmE296WuyYpVTYs=' 'sha256-b3IrgBVvuKx/Q3tmAi79fnf6AFClibrz/0S5x1ghdGU=' 'sha256-UB25FX43eo9NrJMIko7BjKps6wCOErsprRyPFhq9h0I=' 'sha256-MVfzcGrsRThYjVQZYRpjS//Y3f8GDa6NeYxlBzouwKM=' 'sha256-HNnP4fL9gzCyaUY6k8SWtySoAb46A+Js1zidxRXir9I=' 'sha256-y5RMP9RGKuo6Gl5AKKccLi7d0Pyvt0oNUukfOZFB3Cs=' 'sha256-gH6qLs3ZIASzK9ZjzGMasmGVaG7KA7TEPKjeOT18ZP4=' 'sha256-mm0D7lbpvFvL5riyxzAoh8KqHZ4W8vNT+00iUTe/hqs=' 'sha256-lsZoRA3JrnQcyCHskm4ZDG1zITT31ILfZtYMe+JHBAk=' 'sha256-1EE7vf6w+4QG+Kk67yx5F3ZMNWZCmGQFt2VmSr6TFI4=' 'sha256-hr8NzM0neYRw+/4Mn23Yg2vkABki0seqHWbflmOjE6k=' 'sha256-65eF1s7EqM0R/2vbrSCsBYIhZXINv0mfGXov/miIWno=' 'sha256-rrZ1AxsNGB/jGRTYJfKk/6ajXfd3AstxlFPvaWNA3jg=' 'sha256-6K7f1TMdgqdpuR3l1vx5+RtNrCULjhde7dWdwPwv9pE=' 'sha256-HFj0CyW5qcDwngsiLDMgg+iEZsaQNitkM2VZoujK558=' 'sha256-Jzp3kgew5OyKzQmh4jlNbIxz07oeSNcIeplv3OS4xlM=' 'sha256-Po7Qq9ZJWgpgThlN3migR/2hWSnf1EnsSOZF/9rCRlM=' 'sha256-5Vwd+sKcJvBZJ7lszAgsGMxE7fBb4H+PGlOFWRgiKdA=' 'sha256-avyJT96Uxph0QgQ1apUzYWBueuZeyWT4Y0HgSV57Wa4=' 'sha256-YbcNbeLcI+3CDRBPXrZ/FDWek0P6zqVjTtE0VK7kNNs=' 'sha256-jl950P5qrO+jkn9gef0dRd5ZS35UBec1w4P7HeWiRPM=' 'sha256-yeJJBV8rfMKegSbp9cdqhHYa59vM/TLdhAGvkGBy11w=' 'sha256-7PqBnKqT2DsSe5Awuap4q2MHOJzVwpyex/+C17rtjZQ=' 'sha256-/OiaVR4Dawsggtg36NsX4go1nhZn/Bt3sxwFpJWCJ/w=' 'sha256-fTA6255QAiep0xYUKbH8IVO6OJ2yhFNeI34m0O/zMig=' 'sha256-vi/za8tqklNEy4ZTRksRmbykxR00D2V7bljyIdTA0dc=' 'sha256-uXU6rtZey+pSw8dbfJPRAjQZdILrDIcn6ykWygtzKw4=' 'sha256-evUs0xa1qcSptN9IJ9SLnvE8MZkMevfoxDnnT0S/lBY=' 'sha256-F+i8vMjcIEbJxAs/c+mo0F+6NWFp2i0Mi3mbhr9bxd8=' 'sha256-k21rurKGtu5SGB1OFBbco10qy802mANKUYnLClIu1eQ=' 'sha256-ktlz9OmYC6VnoUz0vKcUK1KjW97Br2FK38gHlB2BJ/Y=' 'sha256-oTst8bH2kNuJqO0ZqcO9YYFbOCu18mUDx9ZWxODugls=' 'sha256-nifShOGAaYP6V0JS3IpBHDEcgKDPrHBYa9JaZh8kYqI=' 'sha256-fdbN/EEtEJ03laHD3WsMwnbFBwOcdNmIhOI3yYuyIeo=' 'sha256-V/76Tb35rdz/dDtlkr+C2I4JpYZZzZCqhhEt+fYLYMk=' 'sha256-Kv06yB5ibmZ3z5o95fVCCGai/YDt70jki+VELkixwy8=' 'sha256-yODXvUA9NLPGcuaaWjfuYazR2jCA1X6fS09Jfa/whoA=' 'sha256-OvWG3+I+hAceJx8SkymPdQVYM3X/Wp0g2zNNaq9m1Yg=' 'sha256-MIFGJ1UvDxrM2XDSeXs19Aq+KXYTvWMtfw/moPcfB+w=' 'sha256-V/76Tb35rdz/dDtlkr+C2I4JpYZZzZCqhhEt+fYLYMk=' 'sha256-VxOhT2itB5+HQHvcguVjwZmgYRTQl2by9El/q81dE1g=' 'sha256-m4RbwnBXR6AHsKUaJfyxK4V/RHgMg8YgeqVt7pjQm+A=' 'sha256-oZqvSGYY1VD1bU466LsnymssH1TKWi70JEV0ZG91uSA=' 'sha256-p6eBCuOcaIs25KWrul9F+C5C2y3fWEBxijyQdvjbcF8=' 'sha256-nMxMqdZhkHxz5vAuW/PAoLvECzzsmeAxD/BNwG15HuA=' 'sha256-+2p9zf6LUuMAE3gPUkPFjNfIk19gfod4gl3tWT780Mg=' 'sha256-BjoI/873ETwnQBaCcMF4pdDCWVS0KVOkRRvg2qk19sk=' 'sha256-xXxPsrSAF/30+BfInOAHC/jGhtyaMHq7k2q4WxoP/BA=' 'sha256-xa3vbQA2OwSkgpvyitcLEdy9ojLhVCvF30PfnsARbXo=' 'sha256-jpGv5YlO40U+JPyq7cmS40r11xc6F1xNxkQJkoWjogU=' 'sha256-uJoaRWydfwvmPXcA4wwgV+If236DWxTOO3mlaU/Vsko=' 'sha256-ibeXKIp/zMpdU6lsH110hP5KBa6BEuw2EGjDSAqy10c=' 'sha256-OytOuYKy6L2pQ1wH96BxcklKJwulh20ee7FvmyazkEQ=' 'sha256-vYKJdGaV9lAgFma4UFF5J9BSBwTZmLpz4uLiOkRWMvE=' 'sha256-Jxo7BqCxsCPB85PNiwMeM1zCrez2OyZ+GTIEPB6pjtQ=' 'sha256-DBGQlU29t9ZEuh4RHlXf8n6XVv516Hwf00PTrSH0UQ0=' 'sha256-H96RQSGSW01QSULr8yI8s7x25XPL4PIN7ueGBYCwHLU=' 'sha256-uL4ejRFv1n1fXaLaqypArtg/wUprTn+UE732bGDuVsI=' 'sha256-oJ09hmozvV4Yh3Q9TWjZOOYW2qusBtGW5repVCmQE0A=' 'sha256-KfaorAwmH1xOhKyAvWI2NFUHLiC8hvTjYUmYzENUesQ=' 'sha256-JNnfu9DK0IPMywKLqT346trWuIe0RiHj3zQ+uhZi/M0=' 'sha256-S0GWpcZsrv4FIOQ/emsBY3wA5g8xhoCj5j+oA4GUX1M=' 'sha256-kYqlhDVDqJuXyU03et44Z+2EMYEWOHM2+SXlHgBq10o=' 'sha256-DqzEglxtOp04pVFEkNTTtVlicE3k/aPO3F/ykn7Z1u4=' 'sha256-H8jjrBVxCxS5+79wcLL/5FMh4CHX/yndX5JxNlVvkDk=' 'sha256-VqVMaho45tqyxsmTyl00NVWvVAtdADwExI9UgIXackI=' 'sha256-vhJVhNQrJ5zc2ZwsqnhMFfCMh5/diNJv3AL4wXMiDKs=' 'sha256-FuSTRzCyoRlRv4XCWe9eQBHTdPBlEOBhVKhGZVouxq8=' 'sha256-RvAvREUHojDuwHylTVWZp9DhleqLs6ml8G7LpjCF+EY=' 'sha256-wwy1ibfWY3iT+WyKLWxqKfq43JkmvzSRRBw4Gay1pcM=' 'sha256-CGOeZ276WA7K4F7Qn/sTGjtc/1AYGGFf4g9UEj3NitY=' 'sha256-7Y6IQrjXKFmLaTU0jyTlsS12iDnYeka+QNyr7ToGRCs=' 'sha256-7Y6IQrjXKFmLaTU0jyTlsS12iDnYeka+QNyr7ToGRCs=' 'sha256-PeU6ImguD7d9eT9VCC/P7oYe40+MOdTBL2e5acGqRbw=' 'sha256-hf9DQwbMUZlBiQP3C2Jn3KJPyf91rSbuUu1Y/OT41Qc=' 'sha256-evneh/M4fIjMisIBMjRrvVEv6BKMAWaoWPYxWhZ8FAc=' 'sha256-i+6e7PysqKsUzdi9tXqBmZmX/kVrA6I+cz2saZKguJU=' 'sha256-Tj/yhpIrAuKoWUOrEJbhd7EotiqD7ZFJCiGOWdSnIP4=' 'sha256-YLrJg9ADZnuduePmlzU5nQtmIH/jQ9NfvXyKwwBbQ/U=' 'sha256-BYoWw8sQQxMGEeyLU5t3v87yzP1WXse4L7UuS6U1nSY=' 'sha256-B7E1+S19ji60Q4dxHSEVrJFpxMQmahuzoB7si8jESdQ=' 'sha256-Cfi1nWJV+2zyxJ1CCeaOf0kkzpU/2V8pbkQ/KfRENdg=' 'sha256-tkkQAeV+FhyS8h2pl1Id4gSjxtTi5yubwaENsZHpjJo=' 'sha256-H7i9WMR3Q7J6jLroEMIOl2NLQ6BjrapesiFBlA29SPE=' 'sha256-O4dCW51SIKtd9bxl95vF+13ip8n+wZAJhyAz6tM5fZk=' 'sha256-clkStC1Cb3QJXrrxONnkZH5QnVmRajvYZgeRmXk0oc0=' 'sha256-Qwh5R13fvSDc5Qh4ZVt8Pd+GARm0uyZU6f3eY84o11E=' 'sha256-rTf/2pS6+qRMsHYurfhdPUy22nSnbhIvyLtXZFVUeDk=' 'sha256-mwbLoqJfKWljBMcAgG+PbZXlQuUvtqrCjpHD8XNP1N4=' 'sha256-e8zEkN8CatJMD+tH9UXRTekXDK4h050uVG2Je5bBAic=' 'sha256-bP52xyNkfrAOpjzX3kUXUd2ytlzk9FMBvgnb+VA1VmM=' 'sha256-nG/VdwrJpD1x13sArdLLvdRdw0RqyZpmgWI2YRb/Pe4=' 'sha256-nDkVBQb1vVC4I9HqPdRyyVPHzNV2urUlk8bzCZrFSIU=' 'sha256-NWq+ua/uzu3DyRcl4/EJi+4qfVF7jfgD/SJQZ4Nrgso=' 'sha256-j6yaiHidknyicDhzQ7pYOUyz3ZTA2yjRhRDFkSdn9z0=' 'sha256-1SVL2SsZdJkzNsIdV14QQeIlFEk772MK8D4qCeIeuB0=' 'sha256-az5G7hmBh7XXucylcfZd2tu3F0d2rsl9kk84sVLmXZE=' 'sha256-g59xlYzZAdqrE3jCr+bsUkFq9rcV+c27wxsUFz8/OqQ=' 'sha256-oFUzyU1MWJetoQV0TIaDlCagvA/txn8KRpfeaoWOa9k=' 'sha256-tuvjSpWkAD0yZmuL+3pFNSI94ewAwujUFX0bL2TrEew=' 'sha256-zivMMlDSyfOXWMdS5KB1SnKYOG4mNT0cZyZFagixWJw=' 'sha256-oBFTyWUR8pji6AIv/Z4Dxq5rvbCAf88+YvElwUlpT2o=' 'sha256-46owHzMQzTQzDoQtAs2Q8w196QHLPGEJxtTemLNnUa8=' 'sha256-ybFH+ZQXRcWWZMivHTr06AhNHtlkCHU237fXbHmEPCc=' 'sha256-YnTDegVFioCN+XBzDSytwQ4IvTtGQdyeCYq0OTIOK2M=' 'sha256-z/cXfgyJskhWKzM2Ds2G14gdMEioa0tzrIN+HkwzRhc=' 'sha256-uofzlAwfziCPFFYcnv2LfE8Hkw7vPPc8ochJFNQCXR0=' 'sha256-+eeMd+/t+tD4uZcfUeep1PFU4u/Re3bwNhjUof5jvzE=' 'sha256-7NKDXupap/d5qXdYijo5sluon/M5g4ESVLp7CHQuhIs=' 'sha256-97o4u6NOOXKKCCQ/RV8J53F81vXBBOI8bZ5/3dfFuLs=' 'sha256-7wj/+4oyhC/Un8WKFeS81vcvueSVhV/Hk8Tuw/NlDC8=' 'sha256-xoNN63L9AAEOpg5YcXPLo/hZsa/ms6XGntW9P4Bv2J0=' 'sha256-AreGLXCLTcDm1DIRuJab683i35k4tapqceElfDF9Vyk=' 'sha256-XTOOWbMsh6dXtrIPLf0Ophom1MWWbAY0gwI/5MOfdY0=' 'sha256-CobMTtk+0uPXLXC65Ye5G29kQIkxWWchN3RMAy0zQFg=' 'sha256-RwRd+t2YIANCCkvHZg5fBTNQY5dUxDtrxbeuuq9kqtE=' 'sha256-4nVc9RcryVOXP971ghz5PIn0825eqwcQZDnZHzlBa94=' 'sha256-CDFuNbpdbWDDc5kszXQtAPNFMKOAhSV4PNPFHdo2tmA=' 'sha256-UlUEW3TiqV5fzPaTkOpZl1M5AgZgGStqhIhilc6+x+o=' 'sha256-lMuNwjy4Fw1In/+Nadl5ZPm5gAa4t2jbLUL/ybM9rzU=' 'sha256-JuvLI1jOLUft6TYJIV84w8zpT7+7kBuZd8i4c0GU+3Q=' 'sha256-8oNYgMXalkkCmtcsZGqRDW6hTsqrgjhl1mV9wmKUf08=' 'sha256-hSN2XsbedlD6hbSEiO7LJJ7NpO5vhVw4wTgDcfzN0y8=' 'sha256-rYyT5f4Pj/P23pPIA6YGWr/Oqz0Zt3DFihIX1DbOJ38=' 'sha256-KBHujwE4c4GTYYH2YSkmg+r/GpVxq1yVnKVFbkoHl7o=' 'sha256-ShMDUoWZvRCnb4rDPm4XQfcrvMK/DdOtAGl432Ea1X4=' 'sha256-gTwK//fEfC96Gy3UYVhZ5snjKTAc5mQxF3C8MkqdpWc=' 'sha256-h71QSxf3doEDAsFspQmTziGENW+FU1iRgpUovlqItIs=' 'sha256-+vV+aIevEmeUgHUZ+30V+aVGw364BtPgaOQBTbhWGAo=' 'sha256-/QKUM2sqKgi4kHOhwtI0UUnMLeYquYfY+oifT9PTsLg=' 'sha256-ZY8nuvJOAzbQtY5QLgaGChhe47l9w2uMVmiRK/9wLKs=' 'sha256-TBRXmoJQMyNBidnRqtWIHcUY8xwykJ2ibmW+yC/cwa8=' 'sha256-lzgLTv5drYp8goI+6LT1p1UAPcrNHxqqgT7KxhkLDVQ=' 'sha256-GZD+6UTcdtIisQezEssJ+mmE4+jnT9b5EWxygpxK86c=' 'sha256-lwaE9uChYKflXSlwneKzV7dy7laztrGz9dqTn8Nqk9c=' 'sha256-fvWavdxMvpo/L6j9P0DVLmvDKyT6F/h2HGHEyfT2wVI=' 'sha256-Ue3R2JdLN5SMrEWI8nrldj81hvtnINq+nnAINZ9D0us=' 'sha256-ZY8nuvJOAzbQtY5QLgaGChhe47l9w2uMVmiRK/9wLKs=' 'sha256-gQN4tQmcv04xC0iyamW7NMvbzbJIueJSeGg5Vp1Ga5c=' 'sha256-ph5Y9yFNlbTQ3WYMJ9h14J69MfL2yFUttkYcuWCvFYk=' 'sha256-u0Qvw6xFTiZouWz1vD+mtmsM43tgh5OHaMw+fJ7s4NM=' 'sha256-zm/aRtIl3vN40kir5vo1e9f4HaUn9OFoJy4QvmUsUMg=' 'sha256-7sGK4R0Zjhf7/TDCGD0i9/JuMLGCSEht4HgieNDPNxw=' 'sha256-O09uWmBsnjjXSFPbmnDs9Y9Vk184xWzB96HSUG6y/2A=' 'sha256-rSsmU/Na8nM5NyiQrTyBbRxPU9OZ/51rWr01U3ERkok=' 'sha256-yAKOy7LiYRzGKKJq+icEdSGRt0WKi1Gau+Kv78m/Py8=' 'sha256-/a9VN3ny1jF46KLTOME78ffKWLQ2Jt6XlDSNgwN6I+U=' 'sha256-ii136h2Drx83xGusGNGvOMqKaz2SwqzH7kDTU0i5yaM=' 'sha256-+Y7yZLTDrsvX2uNrs77w2u8Svv8uqL/VZ1O1AYZnILI=' 'sha256-5z7YCxjt9UeBdag8xgyKwlTzp5Bp9MhtgdIDIkd2ojQ=' 'sha256-CfsPd9Wj/Tp8Lz+GQclgdpIGL+AdT4+Hpv3i/vYtNks=' 'sha256-lZF2V6WydXZASfaOAPQ1RXHUZ4KzybmEtqRzaJkBaYA=' 'sha256-bUZT7WNIaaSl0vhMnVftsdam4pt6HEgNb25AwTy/35M=' 'sha256-5pXQLrfXfLTbbUdSCorN2fkYnCsHlrsrRhpmATU9M5A=' 'sha256-7pZJi3+X6isGgE/5WtfiQMjDLzSl7ocLcn71lqa4Yz8=' 'sha256-9Ius7li4cTIU5fhf7hosXZWbq91cWfaGu9MRaz4I1BE=' 'sha256-vAm7OJkF7KSJVLOjUPRM+syKWV814paameJ9MuEjCpk=' 'sha256-HrSQHsebxNoTHANO660G70BiwVH3/o0trJTlc61EibM=' 'sha256-I81HFcVGDmKx30nhsG4Zp82KU3Xg4LXJ8lwri0+oQzs=' 'sha256-YOAFVwuvvE6mzPvXA75NMu9S8jpt3K388/Tsfe943NE=' 'sha256-QAi/wJ90OD9yXyQvORS7W0BQYkInwxSUQ9ptE/QiGgk=' 'sha256-My0Zr0dUmKtfKpYKsray8q7TfrbBsShyp5Y4V/TSyc8=' 'sha256-nzijOJhKAp8reJXFWsat4a7Yi/QD8LUHz59lB83DdI0=' 'sha256-QjKhDZs11PhxBxZB8oMJhoSUiKaYBiWidPOTB+tIuR0=' 'sha256-QD3Mj/PdFiE0MqON69pDVGv5QmpTAAN9KI2SaG0IDPY=' 'sha256-9mkaCOsjoD3ovFgPEdYyF3Vw3T4rHDdnfdWc6oPgbdE=' 'sha256-tTF6FFgI6sMxXY2UeKgfgrzoaybcQlewMFxUf4Z7Ez8=' 'sha256-FoGkZP1Cs8/VanP0x6FhLF6oFpk4QItMM2xg4ozb0G0=' 'sha256-l54U7u1v7fc6KzAabiFl3QJro49wcsN9b/Y7rxy2BL8=' 'sha256-38nNO3LRZmoHJRirmGC3cx4zVzs1JwfiLddsYOS+FGw=' 'sha256-t6oewASd7J1vBg5mQtX4hl8bg8FeegYFM3scKLIhYUc=' 'sha256-3yAGODLlFl5kIgtbBVZUVawnX6A8HrCTWWpPu94uMHM=' 'sha256-eXQbyB8YxZkWD5epgriI5Aoh333fjv618WjVSFU6Fbg=' 'sha256-i0JPB0qmRu5AViJTxOIzqXnfGoiWFw+oNAm4uJd7ZQk=' 'sha256-FcallFOdv99V7z+b7Lk+H6PlT8q7X6NAl/LUh94P2Qg='; font-src 'self' data: ;img-src 'self' www.google.com www.google.com.hk www.google-analytics.com myinfohubstorage2022.blob.core.windows.net data:; connect-src 'self' www.google.com www.google-analytics.com myinfohubstorage2022.blob.core.windows.net; frame-src 'self' calendar.google.com www.google.com www.youtube.com accounts.google.com googletagmanager.com; media-src myinfohubstorage2022.blob.core.windows.net

Directive Analysis

default-srcLOW

self

script-srcLOW

self sha256-m4ZZEQtij0fkZUrXq2l1e09qtFW6wJiAwTSqOJxhOvo= sha256-WiWunkkjgdWn+gyHKieSULEzEPvFZknjzlBBGKFsXpQ= googleads.g.doubleclick.net www.googletagmanager.com www.google.com www.gstatic.com www.google-analytics.com

style-srcLOW

self sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU= sha256-46h3ZXhVBM4m14HmYWt7mosUwvxdu3LV0KBSok+yCdk= sha256-98fF2xFvqKp6gU2brd/+3TNklH3mT9CegihYPP22ECE= sha256-m+RBWWFk9MmdWEKGmOpGdgLdsjJFAa88Ne4Oy2Jb1PA= sha256-pVYk9IKmtN7+MXDyb+r5yCk4ps4QFIAuViq2t9/VRlc= sha256-mApZctEX6h6upxWzcTBDes/Dvl3wLvkOM5CD4H2XyYY= sha256-D4ODAglf3fPJNsPVN+Eoo8tpM3kQ16HSpa6qxDyxtBo= sha256-ilqL3Cnth11uQjKbIkaMC9ZuBT7z2jC+wX8Hi7HpP64= sha256-f6YFv6r0sEew0F9GZ2cX1JpBNb5cenNGWo7erWfYiB0= sha256-DuK10BpKOYN8o8XkRGNQ3BmMA5/Sz2P5yN+VoqLntRw= sha256-B86VC+s4QNSXqDTH2ns+VBWvIcI6WdihpDKXLULZedA= sha256-6AYdNCisBC5L0G+FNGVbFmcFw6y4WorvE/syEaiFBuM= sha256-fKzoElq0W/MJ4lISP6uVXHUwAJ10VmE296WuyYpVTYs= sha256-b3IrgBVvuKx/Q3tmAi79fnf6AFClibrz/0S5x1ghdGU= sha256-UB25FX43eo9NrJMIko7BjKps6wCOErsprRyPFhq9h0I= sha256-MVfzcGrsRThYjVQZYRpjS//Y3f8GDa6NeYxlBzouwKM= sha256-HNnP4fL9gzCyaUY6k8SWtySoAb46A+Js1zidxRXir9I= sha256-y5RMP9RGKuo6Gl5AKKccLi7d0Pyvt0oNUukfOZFB3Cs= sha256-gH6qLs3ZIASzK9ZjzGMasmGVaG7KA7TEPKjeOT18ZP4= sha256-mm0D7lbpvFvL5riyxzAoh8KqHZ4W8vNT+00iUTe/hqs= sha256-lsZoRA3JrnQcyCHskm4ZDG1zITT31ILfZtYMe+JHBAk= sha256-1EE7vf6w+4QG+Kk67yx5F3ZMNWZCmGQFt2VmSr6TFI4= sha256-hr8NzM0neYRw+/4Mn23Yg2vkABki0seqHWbflmOjE6k= sha256-65eF1s7EqM0R/2vbrSCsBYIhZXINv0mfGXov/miIWno= sha256-rrZ1AxsNGB/jGRTYJfKk/6ajXfd3AstxlFPvaWNA3jg= sha256-6K7f1TMdgqdpuR3l1vx5+RtNrCULjhde7dWdwPwv9pE= sha256-HFj0CyW5qcDwngsiLDMgg+iEZsaQNitkM2VZoujK558= sha256-Jzp3kgew5OyKzQmh4jlNbIxz07oeSNcIeplv3OS4xlM= sha256-Po7Qq9ZJWgpgThlN3migR/2hWSnf1EnsSOZF/9rCRlM= sha256-5Vwd+sKcJvBZJ7lszAgsGMxE7fBb4H+PGlOFWRgiKdA= sha256-avyJT96Uxph0QgQ1apUzYWBueuZeyWT4Y0HgSV57Wa4= sha256-YbcNbeLcI+3CDRBPXrZ/FDWek0P6zqVjTtE0VK7kNNs= sha256-jl950P5qrO+jkn9gef0dRd5ZS35UBec1w4P7HeWiRPM= sha256-yeJJBV8rfMKegSbp9cdqhHYa59vM/TLdhAGvkGBy11w= sha256-7PqBnKqT2DsSe5Awuap4q2MHOJzVwpyex/+C17rtjZQ= sha256-/OiaVR4Dawsggtg36NsX4go1nhZn/Bt3sxwFpJWCJ/w= sha256-fTA6255QAiep0xYUKbH8IVO6OJ2yhFNeI34m0O/zMig= sha256-vi/za8tqklNEy4ZTRksRmbykxR00D2V7bljyIdTA0dc= sha256-uXU6rtZey+pSw8dbfJPRAjQZdILrDIcn6ykWygtzKw4= sha256-evUs0xa1qcSptN9IJ9SLnvE8MZkMevfoxDnnT0S/lBY= sha256-F+i8vMjcIEbJxAs/c+mo0F+6NWFp2i0Mi3mbhr9bxd8= sha256-k21rurKGtu5SGB1OFBbco10qy802mANKUYnLClIu1eQ= sha256-ktlz9OmYC6VnoUz0vKcUK1KjW97Br2FK38gHlB2BJ/Y= sha256-oTst8bH2kNuJqO0ZqcO9YYFbOCu18mUDx9ZWxODugls= sha256-nifShOGAaYP6V0JS3IpBHDEcgKDPrHBYa9JaZh8kYqI= sha256-fdbN/EEtEJ03laHD3WsMwnbFBwOcdNmIhOI3yYuyIeo= sha256-V/76Tb35rdz/dDtlkr+C2I4JpYZZzZCqhhEt+fYLYMk= sha256-Kv06yB5ibmZ3z5o95fVCCGai/YDt70jki+VELkixwy8= sha256-yODXvUA9NLPGcuaaWjfuYazR2jCA1X6fS09Jfa/whoA= sha256-OvWG3+I+hAceJx8SkymPdQVYM3X/Wp0g2zNNaq9m1Yg= sha256-MIFGJ1UvDxrM2XDSeXs19Aq+KXYTvWMtfw/moPcfB+w= sha256-V/76Tb35rdz/dDtlkr+C2I4JpYZZzZCqhhEt+fYLYMk= sha256-VxOhT2itB5+HQHvcguVjwZmgYRTQl2by9El/q81dE1g= sha256-m4RbwnBXR6AHsKUaJfyxK4V/RHgMg8YgeqVt7pjQm+A= sha256-oZqvSGYY1VD1bU466LsnymssH1TKWi70JEV0ZG91uSA= sha256-p6eBCuOcaIs25KWrul9F+C5C2y3fWEBxijyQdvjbcF8= sha256-nMxMqdZhkHxz5vAuW/PAoLvECzzsmeAxD/BNwG15HuA= sha256-+2p9zf6LUuMAE3gPUkPFjNfIk19gfod4gl3tWT780Mg= sha256-BjoI/873ETwnQBaCcMF4pdDCWVS0KVOkRRvg2qk19sk= sha256-xXxPsrSAF/30+BfInOAHC/jGhtyaMHq7k2q4WxoP/BA= sha256-xa3vbQA2OwSkgpvyitcLEdy9ojLhVCvF30PfnsARbXo= sha256-jpGv5YlO40U+JPyq7cmS40r11xc6F1xNxkQJkoWjogU= sha256-uJoaRWydfwvmPXcA4wwgV+If236DWxTOO3mlaU/Vsko= sha256-ibeXKIp/zMpdU6lsH110hP5KBa6BEuw2EGjDSAqy10c= sha256-OytOuYKy6L2pQ1wH96BxcklKJwulh20ee7FvmyazkEQ= sha256-vYKJdGaV9lAgFma4UFF5J9BSBwTZmLpz4uLiOkRWMvE= sha256-Jxo7BqCxsCPB85PNiwMeM1zCrez2OyZ+GTIEPB6pjtQ= sha256-DBGQlU29t9ZEuh4RHlXf8n6XVv516Hwf00PTrSH0UQ0= sha256-H96RQSGSW01QSULr8yI8s7x25XPL4PIN7ueGBYCwHLU= sha256-uL4ejRFv1n1fXaLaqypArtg/wUprTn+UE732bGDuVsI= sha256-oJ09hmozvV4Yh3Q9TWjZOOYW2qusBtGW5repVCmQE0A= sha256-KfaorAwmH1xOhKyAvWI2NFUHLiC8hvTjYUmYzENUesQ= sha256-JNnfu9DK0IPMywKLqT346trWuIe0RiHj3zQ+uhZi/M0= sha256-S0GWpcZsrv4FIOQ/emsBY3wA5g8xhoCj5j+oA4GUX1M= sha256-kYqlhDVDqJuXyU03et44Z+2EMYEWOHM2+SXlHgBq10o= sha256-DqzEglxtOp04pVFEkNTTtVlicE3k/aPO3F/ykn7Z1u4= sha256-H8jjrBVxCxS5+79wcLL/5FMh4CHX/yndX5JxNlVvkDk= sha256-VqVMaho45tqyxsmTyl00NVWvVAtdADwExI9UgIXackI= sha256-vhJVhNQrJ5zc2ZwsqnhMFfCMh5/diNJv3AL4wXMiDKs= sha256-FuSTRzCyoRlRv4XCWe9eQBHTdPBlEOBhVKhGZVouxq8= sha256-RvAvREUHojDuwHylTVWZp9DhleqLs6ml8G7LpjCF+EY= sha256-wwy1ibfWY3iT+WyKLWxqKfq43JkmvzSRRBw4Gay1pcM= sha256-CGOeZ276WA7K4F7Qn/sTGjtc/1AYGGFf4g9UEj3NitY= sha256-7Y6IQrjXKFmLaTU0jyTlsS12iDnYeka+QNyr7ToGRCs= sha256-7Y6IQrjXKFmLaTU0jyTlsS12iDnYeka+QNyr7ToGRCs= sha256-PeU6ImguD7d9eT9VCC/P7oYe40+MOdTBL2e5acGqRbw= sha256-hf9DQwbMUZlBiQP3C2Jn3KJPyf91rSbuUu1Y/OT41Qc= sha256-evneh/M4fIjMisIBMjRrvVEv6BKMAWaoWPYxWhZ8FAc= sha256-i+6e7PysqKsUzdi9tXqBmZmX/kVrA6I+cz2saZKguJU= sha256-Tj/yhpIrAuKoWUOrEJbhd7EotiqD7ZFJCiGOWdSnIP4= sha256-YLrJg9ADZnuduePmlzU5nQtmIH/jQ9NfvXyKwwBbQ/U= sha256-BYoWw8sQQxMGEeyLU5t3v87yzP1WXse4L7UuS6U1nSY= sha256-B7E1+S19ji60Q4dxHSEVrJFpxMQmahuzoB7si8jESdQ= sha256-Cfi1nWJV+2zyxJ1CCeaOf0kkzpU/2V8pbkQ/KfRENdg= sha256-tkkQAeV+FhyS8h2pl1Id4gSjxtTi5yubwaENsZHpjJo= sha256-H7i9WMR3Q7J6jLroEMIOl2NLQ6BjrapesiFBlA29SPE= sha256-O4dCW51SIKtd9bxl95vF+13ip8n+wZAJhyAz6tM5fZk= sha256-clkStC1Cb3QJXrrxONnkZH5QnVmRajvYZgeRmXk0oc0= sha256-Qwh5R13fvSDc5Qh4ZVt8Pd+GARm0uyZU6f3eY84o11E= sha256-rTf/2pS6+qRMsHYurfhdPUy22nSnbhIvyLtXZFVUeDk= sha256-mwbLoqJfKWljBMcAgG+PbZXlQuUvtqrCjpHD8XNP1N4= sha256-e8zEkN8CatJMD+tH9UXRTekXDK4h050uVG2Je5bBAic= sha256-bP52xyNkfrAOpjzX3kUXUd2ytlzk9FMBvgnb+VA1VmM= sha256-nG/VdwrJpD1x13sArdLLvdRdw0RqyZpmgWI2YRb/Pe4= sha256-nDkVBQb1vVC4I9HqPdRyyVPHzNV2urUlk8bzCZrFSIU= sha256-NWq+ua/uzu3DyRcl4/EJi+4qfVF7jfgD/SJQZ4Nrgso= sha256-j6yaiHidknyicDhzQ7pYOUyz3ZTA2yjRhRDFkSdn9z0= sha256-1SVL2SsZdJkzNsIdV14QQeIlFEk772MK8D4qCeIeuB0= sha256-az5G7hmBh7XXucylcfZd2tu3F0d2rsl9kk84sVLmXZE= sha256-g59xlYzZAdqrE3jCr+bsUkFq9rcV+c27wxsUFz8/OqQ= sha256-oFUzyU1MWJetoQV0TIaDlCagvA/txn8KRpfeaoWOa9k= sha256-tuvjSpWkAD0yZmuL+3pFNSI94ewAwujUFX0bL2TrEew= sha256-zivMMlDSyfOXWMdS5KB1SnKYOG4mNT0cZyZFagixWJw= sha256-oBFTyWUR8pji6AIv/Z4Dxq5rvbCAf88+YvElwUlpT2o= sha256-46owHzMQzTQzDoQtAs2Q8w196QHLPGEJxtTemLNnUa8= sha256-ybFH+ZQXRcWWZMivHTr06AhNHtlkCHU237fXbHmEPCc= sha256-YnTDegVFioCN+XBzDSytwQ4IvTtGQdyeCYq0OTIOK2M= sha256-z/cXfgyJskhWKzM2Ds2G14gdMEioa0tzrIN+HkwzRhc= sha256-uofzlAwfziCPFFYcnv2LfE8Hkw7vPPc8ochJFNQCXR0= sha256-+eeMd+/t+tD4uZcfUeep1PFU4u/Re3bwNhjUof5jvzE= sha256-7NKDXupap/d5qXdYijo5sluon/M5g4ESVLp7CHQuhIs= sha256-97o4u6NOOXKKCCQ/RV8J53F81vXBBOI8bZ5/3dfFuLs= sha256-7wj/+4oyhC/Un8WKFeS81vcvueSVhV/Hk8Tuw/NlDC8= sha256-xoNN63L9AAEOpg5YcXPLo/hZsa/ms6XGntW9P4Bv2J0= sha256-AreGLXCLTcDm1DIRuJab683i35k4tapqceElfDF9Vyk= sha256-XTOOWbMsh6dXtrIPLf0Ophom1MWWbAY0gwI/5MOfdY0= sha256-CobMTtk+0uPXLXC65Ye5G29kQIkxWWchN3RMAy0zQFg= sha256-RwRd+t2YIANCCkvHZg5fBTNQY5dUxDtrxbeuuq9kqtE= sha256-4nVc9RcryVOXP971ghz5PIn0825eqwcQZDnZHzlBa94= sha256-CDFuNbpdbWDDc5kszXQtAPNFMKOAhSV4PNPFHdo2tmA= sha256-UlUEW3TiqV5fzPaTkOpZl1M5AgZgGStqhIhilc6+x+o= sha256-lMuNwjy4Fw1In/+Nadl5ZPm5gAa4t2jbLUL/ybM9rzU= sha256-JuvLI1jOLUft6TYJIV84w8zpT7+7kBuZd8i4c0GU+3Q= sha256-8oNYgMXalkkCmtcsZGqRDW6hTsqrgjhl1mV9wmKUf08= sha256-hSN2XsbedlD6hbSEiO7LJJ7NpO5vhVw4wTgDcfzN0y8= sha256-rYyT5f4Pj/P23pPIA6YGWr/Oqz0Zt3DFihIX1DbOJ38= sha256-KBHujwE4c4GTYYH2YSkmg+r/GpVxq1yVnKVFbkoHl7o= sha256-ShMDUoWZvRCnb4rDPm4XQfcrvMK/DdOtAGl432Ea1X4= sha256-gTwK//fEfC96Gy3UYVhZ5snjKTAc5mQxF3C8MkqdpWc= sha256-h71QSxf3doEDAsFspQmTziGENW+FU1iRgpUovlqItIs= sha256-+vV+aIevEmeUgHUZ+30V+aVGw364BtPgaOQBTbhWGAo= sha256-/QKUM2sqKgi4kHOhwtI0UUnMLeYquYfY+oifT9PTsLg= sha256-ZY8nuvJOAzbQtY5QLgaGChhe47l9w2uMVmiRK/9wLKs= sha256-TBRXmoJQMyNBidnRqtWIHcUY8xwykJ2ibmW+yC/cwa8= sha256-lzgLTv5drYp8goI+6LT1p1UAPcrNHxqqgT7KxhkLDVQ= sha256-GZD+6UTcdtIisQezEssJ+mmE4+jnT9b5EWxygpxK86c= sha256-lwaE9uChYKflXSlwneKzV7dy7laztrGz9dqTn8Nqk9c= sha256-fvWavdxMvpo/L6j9P0DVLmvDKyT6F/h2HGHEyfT2wVI= sha256-Ue3R2JdLN5SMrEWI8nrldj81hvtnINq+nnAINZ9D0us= sha256-ZY8nuvJOAzbQtY5QLgaGChhe47l9w2uMVmiRK/9wLKs= sha256-gQN4tQmcv04xC0iyamW7NMvbzbJIueJSeGg5Vp1Ga5c= sha256-ph5Y9yFNlbTQ3WYMJ9h14J69MfL2yFUttkYcuWCvFYk= sha256-u0Qvw6xFTiZouWz1vD+mtmsM43tgh5OHaMw+fJ7s4NM= sha256-zm/aRtIl3vN40kir5vo1e9f4HaUn9OFoJy4QvmUsUMg= sha256-7sGK4R0Zjhf7/TDCGD0i9/JuMLGCSEht4HgieNDPNxw= sha256-O09uWmBsnjjXSFPbmnDs9Y9Vk184xWzB96HSUG6y/2A= sha256-rSsmU/Na8nM5NyiQrTyBbRxPU9OZ/51rWr01U3ERkok= sha256-yAKOy7LiYRzGKKJq+icEdSGRt0WKi1Gau+Kv78m/Py8= sha256-/a9VN3ny1jF46KLTOME78ffKWLQ2Jt6XlDSNgwN6I+U= sha256-ii136h2Drx83xGusGNGvOMqKaz2SwqzH7kDTU0i5yaM= sha256-+Y7yZLTDrsvX2uNrs77w2u8Svv8uqL/VZ1O1AYZnILI= sha256-5z7YCxjt9UeBdag8xgyKwlTzp5Bp9MhtgdIDIkd2ojQ= sha256-CfsPd9Wj/Tp8Lz+GQclgdpIGL+AdT4+Hpv3i/vYtNks= sha256-lZF2V6WydXZASfaOAPQ1RXHUZ4KzybmEtqRzaJkBaYA= sha256-bUZT7WNIaaSl0vhMnVftsdam4pt6HEgNb25AwTy/35M= sha256-5pXQLrfXfLTbbUdSCorN2fkYnCsHlrsrRhpmATU9M5A= sha256-7pZJi3+X6isGgE/5WtfiQMjDLzSl7ocLcn71lqa4Yz8= sha256-9Ius7li4cTIU5fhf7hosXZWbq91cWfaGu9MRaz4I1BE= sha256-vAm7OJkF7KSJVLOjUPRM+syKWV814paameJ9MuEjCpk= sha256-HrSQHsebxNoTHANO660G70BiwVH3/o0trJTlc61EibM= sha256-I81HFcVGDmKx30nhsG4Zp82KU3Xg4LXJ8lwri0+oQzs= sha256-YOAFVwuvvE6mzPvXA75NMu9S8jpt3K388/Tsfe943NE= sha256-QAi/wJ90OD9yXyQvORS7W0BQYkInwxSUQ9ptE/QiGgk= sha256-My0Zr0dUmKtfKpYKsray8q7TfrbBsShyp5Y4V/TSyc8= sha256-nzijOJhKAp8reJXFWsat4a7Yi/QD8LUHz59lB83DdI0= sha256-QjKhDZs11PhxBxZB8oMJhoSUiKaYBiWidPOTB+tIuR0= sha256-QD3Mj/PdFiE0MqON69pDVGv5QmpTAAN9KI2SaG0IDPY= sha256-9mkaCOsjoD3ovFgPEdYyF3Vw3T4rHDdnfdWc6oPgbdE= sha256-tTF6FFgI6sMxXY2UeKgfgrzoaybcQlewMFxUf4Z7Ez8= sha256-FoGkZP1Cs8/VanP0x6FhLF6oFpk4QItMM2xg4ozb0G0= sha256-l54U7u1v7fc6KzAabiFl3QJro49wcsN9b/Y7rxy2BL8= sha256-38nNO3LRZmoHJRirmGC3cx4zVzs1JwfiLddsYOS+FGw= sha256-t6oewASd7J1vBg5mQtX4hl8bg8FeegYFM3scKLIhYUc= sha256-3yAGODLlFl5kIgtbBVZUVawnX6A8HrCTWWpPu94uMHM= sha256-eXQbyB8YxZkWD5epgriI5Aoh333fjv618WjVSFU6Fbg= sha256-i0JPB0qmRu5AViJTxOIzqXnfGoiWFw+oNAm4uJd7ZQk= sha256-FcallFOdv99V7z+b7Lk+H6PlT8q7X6NAl/LUh94P2Qg=

•Duplicate value 'sha256-V/76Tb35rdz/dDtlkr+C2I4JpYZZzZCqhhEt+fYLYMk=' in style-src directive

•Duplicate value 'sha256-7Y6IQrjXKFmLaTU0jyTlsS12iDnYeka+QNyr7ToGRCs=' in style-src directive

•Duplicate value 'sha256-ZY8nuvJOAzbQtY5QLgaGChhe47l9w2uMVmiRK/9wLKs=' in style-src directive

font-srcLOW

self data:

•Info: 'data:' URI in font-src

img-srcLOW

self www.google.com www.google.com.hk www.google-analytics.com myinfohubstorage2022.blob.core.windows.net data:

•Info: 'data:' URI in img-src

connect-srcLOW

self www.google.com www.google-analytics.com myinfohubstorage2022.blob.core.windows.net

frame-srcLOW

self calendar.google.com www.google.com www.youtube.com accounts.google.com googletagmanager.com

media-srcLOW

myinfohubstorage2022.blob.core.windows.net

Missing Directives

⚠HIGHMissing HIGH directive object-src (Plugin control - should be 'none')

⚠HIGHMissing HIGH directive base-uri (Base URI control - prevents base tag injection)

⚠HIGHMissing HIGH directive frame-ancestors (Framing control - prevents clickjacking)

⚠MEDIUMMissing MEDIUM directive form-action (Form submission control - prevents form hijacking)

Security Headers

✗Cross-Origin-Opener-PolicyMissing

Isolates the browsing context to prevent Spectre-type side-channel attacks and cross-origin window manipulation.

How to add it:

nginx

add_header Cross-Origin-Opener-Policy "same-origin" always;

apache

Header always set Cross-Origin-Opener-Policy "same-origin"

cloudflare

Rules > Transform Rules > HTTP Response Header Modification > Set Cross-Origin-Opener-Policy to "same-origin"

✗Permissions-PolicyMissing

Restricts which browser features (camera, microphone, geolocation) the page can use, limiting attack surface.

How to add it:

nginx

add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;

apache

Header always set Permissions-Policy "camera=(), microphone=(), geolocation=()"

cloudflare

Rules > Transform Rules > HTTP Response Header Modification > Set Permissions-Policy value

✗Referrer-PolicyMissing

Controls how much referrer information is sent with requests, preventing data leaks to third parties.

How to add it:

nginx

add_header Referrer-Policy "strict-origin-when-cross-origin" always;

apache

Header always set Referrer-Policy "strict-origin-when-cross-origin"

cloudflare

Rules > Transform Rules > HTTP Response Header Modification > Set Referrer-Policy to "strict-origin-when-cross-origin"

✓Strict-Transport-SecurityPresent

max-age=31536000; includeSubDomains

Forces browsers to use HTTPS for all future requests, preventing man-in-the-middle attacks and SSL stripping.

✓X-Content-Type-OptionsPresent

nosniff

Prevents browsers from MIME-sniffing responses away from the declared Content-Type, blocking drive-by downloads.

✓X-Frame-OptionsPresent

DENY

Prevents the page from being embedded in iframes, protecting against clickjacking attacks.

✓X-XSS-ProtectionPresent

1; mode=block

Legacy XSS filter for older browsers. Modern browsers use CSP instead. Set to "0" to avoid false positives.

3 recommended security headers are missing on www.cybersechub.hk.

Issues Found

•Duplicate value 'sha256-7Y6IQrjXKFmLaTU0jyTlsS12iDnYeka+QNyr7ToGRCs=' in style-src directiveinfo
•Duplicate value 'sha256-V/76Tb35rdz/dDtlkr+C2I4JpYZZzZCqhhEt+fYLYMk=' in style-src directiveinfo
•Duplicate value 'sha256-ZY8nuvJOAzbQtY5QLgaGChhe47l9w2uMVmiRK/9wLKs=' in style-src directiveinfo
•Info: 'data:' URI in font-srcinfo
•Info: 'data:' URI in img-srcinfo
•Missing HIGH directive base-uri (Base URI control - prevents base tag injection)high
•Missing HIGH directive frame-ancestors (Framing control - prevents clickjacking)high
•Missing HIGH directive object-src (Plugin control - should be 'none')high
•Missing MEDIUM directive form-action (Form submission control - prevents form hijacking)medium
•Missing security header: Cross-Origin-Opener-Policymedium
•Missing security header: Permissions-Policymedium
•Missing security header: Referrer-Policymedium

Recommendations

→Add base-uri directive with appropriate restrictions
→Add form-action directive with appropriate restrictions
→Add frame-ancestors directive with appropriate restrictions
→Add object-src directive with appropriate restrictions

Beyond headers: infrastructure exposure

via OSN, our sister project

Security headers protect the browser. OSN maps what's exposed underneath — servers, open ports, known CVEs, DNS and WHOIS.

See what the internet sees about www.cybersechub.hk

See full exposure report on OSN →Free, no signup.