Thanks@Vasil Michev !

 

It turns out we had our own domain whitelisted which led to the override of our other security policies.

www.000webhost.com