Host
hcru-staging.escap.un.org
- Zone
- un.org
- First seen by us
- 2026-08-26
- Seen in
- 1 Certificate Transparency index
- Resolves
- yes
- IPv6
- no
- DNSSEC
- unsigned
- HTTP status
- 200
- Server
- nginx
- Security headers
- 6 of 10
Content-Security-Policy
10 directives, 535 characters, report-only so it enforces nothing.
[
]
default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data: blob:; connect-src 'self' https://hcruhub-api.dev.escap.un.org https://*.b2clogin.com https://login.microsoftonline.com https://*.in.applicationinsights.azure.com https://js.monitor.azure.com https://*.livediagnostics.monitor.azure.com; frame-src 'self' blob: https://*.b2clogin.com https://login.microsoftonline.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'
HTTP Strict Transport Security
max-age 31536000, includeSubDomains.
Provenance
| Attribute | Value | Source | Fetched |
|---|---|---|---|
| observed_in_ct | hcru-staging.escap.un.org | ct | 2026-08-26T07:13:15.863794+00:00 |
| observed_in_ct | hcru-staging.escap.un.org | ct | 2026-08-26T14:44:30.779372+00:00 |
| resolves | true | dns | 2026-08-26T16:30:36.344256+00:00 |
| http_status | 200 | http_headers | 2026-08-26T19:33:03.820864+00:00 |
| csp_present | true | http_headers | 2026-08-26T19:33:03.820898+00:00 |
| hsts_present | true | http_headers | 2026-08-26T19:33:03.820906+00:00 |
| server_banner | nginx | http_headers | 2026-08-26T19:33:03.820915+00:00 |
This page reports what the host sent in reply to one ordinary request. It is not a security assessment and no conclusion about exploitability should be drawn from it. If you operate this host and something here is wrong, please tell us and we will correct it.