Host
access.undp.org
- Zone
- undp.org
- First seen by us
- 2026-08-26
- Seen in
- 1 Certificate Transparency index
- Resolves
- yes
- IPv6
- yes
- DNSSEC
- unsigned
- HTTP status
- 200
- Server
- Microsoft-IIS/10.0
- Security headers
- 3 of 10
Content-Security-Policy
8 directives, 538 characters.
[
"
s
c
r
i
p
t
-
s
r
c
a
l
l
o
w
s
'
u
n
s
a
f
e
-
i
n
l
i
n
e
'
w
i
t
h
n
o
n
o
n
c
e
"
,
"
s
c
r
i
p
t
-
s
r
c
a
l
l
o
w
s
'
u
n
s
a
f
e
-
e
v
a
l
'
"
]
default-src 'self'; img-src 'self' data: blob:; script-src 'self' https://*.wvd.microsoft.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' https://login.microsoftonline.com https://*.servicebus.windows.net https://*.wvd.microsoft.com:* wss://*.wvd.microsoft.com:* https://browser.events.data.microsoft.com https://login.windows.net https://login.microsoftonline.us https://windows.cloud.microsoft; frame-src https:; frame-ancestors 'self'; report-uri https://rdweb.wvd.microsoft.com/api/CSPReport/v1
HTTP Strict Transport Security
max-age 31536000, includeSubDomains.
Provenance
| Attribute | Value | Source | Fetched |
|---|---|---|---|
| observed_in_ct | access.undp.org | ct | 2026-08-26T14:45:19.799092+00:00 |
| resolves | true | dns | 2026-08-26T16:34:29.870470+00:00 |
| http_status | 200 | http_headers | 2026-08-26T20:24:12.971396+00:00 |
| csp_present | true | http_headers | 2026-08-26T20:24:12.971431+00:00 |
| hsts_present | true | http_headers | 2026-08-26T20:24:12.971443+00:00 |
| server_banner | Microsoft-IIS/10.0 | http_headers | 2026-08-26T20:24:12.971454+00:00 |
This page reports what the host sent in reply to one ordinary request. It is not a security assessment and no conclusion about exploitability should be drawn from it. If you operate this host and something here is wrong, please tell us and we will correct it.