Read what they state on this website: -https://netsential.com/default.aspx?AspxAutoDetectCookieSupport=1
ASP.NET ISS10 compromittal. Anyone?
CSP seems A grade - OK;
object-src ‘none’;
frame-src ‘self’ -https://www.youtube.com -https://www.google.com/recaptcha/ -https://maps.google.com -https://.twitter.com;
script-src ‘strict-dynamic’ ‘nonce-9d4ba9d94ca646099bf2243609e684ea’;
base-uri ‘self’;
font-src ‘self’ data:- https://fonts.gstatic.com https://use.fontawesome.com;
form-action ‘self’ -https://.twitter.com;
manifest-src ‘self’;
block-all-mixed-content;
img-src ‘self’ data: -https://netsential.com https://.google-analytics.com -https://.ytimg.com -https://.google.com -https://.gstatic.com https://.googleapis.com -https://.twitter.com -https://.twimg.com -https://twitter-badges.s3.amazonaws.com/ -https://.netsential.com;
report-uri /Content_Security_Policy.aspx;
Has to do with so-called Blue Leaks incident(s): https://krebsonsecurity.com/tag/netsential
Re: https://www.wired.com/story/blueleaks-anonymous-law-enforcement-hack/
& https://securityboulevard.com/2020/06/blueleaks-is-huge-fail-for-anonymous-and-ddosecrets/
polonus