Content-Security-Policy

bitdefender.com sends an enforcing CSP. It is nonce-based and uses 'strict-dynamic'.

upgrade-insecure-requests; frame-ancestors 'self' https://explore.bitdefender.com/; object-src 'none'; script-src 'unsafe-eval' 'self' 'nonce-DhcnhD3khTMePgXw' 'strict-dynamic' 'unsafe-hashes' 'sha256-RjileO61mmx5C3Z0ub77ckR3sl153RlKqUC+EcKaVQc=' ;

Directive	Sources
upgrade-insecure-requests	(empty)
frame-ancestors	'self' https://explore.bitdefender.com/
object-src	'none'
script-src	'unsafe-eval' 'self' 'nonce-DhcnhD3khTMePgXw' 'strict-dynamic' 'unsafe-hashes' 'sha256-RjileO61mmx5C3Z0ub77ckR3sl153RlKqUC+EcKaVQc='

Headers sent

Header	Value
strict-transport-security	max-age=31536000; includeSubdomains;
x-content-type-options	nosniff
referrer-policy	no-referrer-when-downgrade
x-xss-protection	1; mode=block
server	cloudflare

Re-scan live

This is a snapshot from 2026-08-04. Check it now:

Scan