Getting an error 503 here...elsewhere it is secure..

[polonus]

Re: https://urlscan.io/result/7c5efcf7-127d-4d37-acdb-835f1866b73f/
Resorting under: -https://www.salesforce.com/etc/designs/sfdc-www/en_us/
->  -//c1.sfdcstatic.com/etc/clientlibs/sfdc-aem-master/clientlibs_analytics_bottom.min.8c20a374991a50ca1a18d7bc072f964f.js
and -https://a.sfdcstatic.com/www/prod/oneTrustV3/742a15b9-6aa4-4c2f-99c1-ad4ca220cf96.js

See: https://aw-snap.info/file-viewer/?protocol=secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=Znx9bXt9cy5mXX1eey5eXW1gfF5tcGBzYA%3D%3D~enc
and consider moved temp: https://www.shodan.io/host/13.108.250.30
Nothing here: https://www.virustotal.com/gui/ip-address/13.108.250.30/relations

log-in:  -https://na58.salesforce.com/ -> https://www.shodan.io/host/13.108.251.156
SSL Grade = A+
CSP glitches:

checkupgrade-insecure-requests
expand_more
errorscript-src [missing]
script-src directive is missing.

errorobject-src [missing]

Missing object-src allows the injection of plugins which can execute JavaScript. Can you set it to 'none'?

What should not be referenced, and actually is security through obscurity,
link: -https://na58.salesforce.com/jslibrary/baselogin.js (coming up with a DOM-XSS scan)...
and re: c1.sfdcstatic.com/etc/clientlibs/sfdc-aem-master/clientlibs_analytics_bottom.min.8c20a374991a50ca1a18d7bc072f964f.js

polonus (volunteer 3rd party cold recon website security analyst and website error-hunter)