konnekt.io

HTML metadata

Title: KONNEKT: Work with Your Local Office 365 Data | KONNEKT
Description: KONNEKT brings all your SharePoint Online files (SharePoint Online sites, OneDrive, Teams) to your Windows File Explorer.
Language: en
Canonical: https://www.konnekt.io/

Open Graph

url: https://www.konnekt.io/
title: KONNEKT: Work with Your Local Office 365 Data
locale: en
site name: KONNEKT
description: KONNEKT brings all your SharePoint Online files (SharePoint Online sites, OneDrive, Teams) to your Windows File Explorer.

Technology

CDN: Cloudflare
CMS: Nuxt
JS framework: Nuxt

Analytics

Cloudflare Insights

Third-party hosts loaded (3)

res.cloudinary.com×50
gdpr.c4a8.net×2
static.cloudflareinsights.com×1

Social

Contact

Email

DNS records live

NS

ns1-09.azure-dns.com
ns2-09.azure-dns.net
ns3-09.azure-dns.org
ns4-09.azure-dns.info

MX

1 smtp.google.com

TXT

www-konnekt-io.azurewebsites.net

Verified for

Google

Email authentication strong

SPF: v=spf1 include:email.freshdesk.com include:spf.mandrillapp.com -all
strict (-all)
DMARC: v=DMARC1; p=reject; sp=reject; adkim=s; aspf=r;
policy: reject (enforced) · sp=reject
DKIM: no key found at common selectors

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-01-17 to 2026-07-18

Expires in 47 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.konnekt.io/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: NOSNIFF
content-security-policy: default-src 'self'; base-uri 'self'; font-src 'self' data: *.cloudfront.net; form-action 'self'; img-src 'self' data: res.cloudinary.com i1.ytimg.com; object-src 'none'; style-src 'self' https: 'unsafe-inline'; script-src-attr 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.youtube.com *.youtube-nocookie.com *.cloudfront.net *.cloudcannon.com ajax.googleapis.com *.googletagmanager.com gdpr.c4a8.net *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.licdn.com static.cloudflareinsights.com; frame-src *.youtube.com *.youtube-nocookie.com *.googlesyndication.com; media-src 'self'; connect-src 'self' *.google-analytics.com gdpr.c4a8.net cloudflareinsights.com
strict-transport-security: max-age=31536000; includeSubDomains; preload