Open
Cached
·
just now
8
directives
Content-Security-Policy
Content-Security-Policy: default-src 'self' exclaimer.com *.exclaimer.com csxd.exclaimer.net csxd.exclaimer.com *.storyblok.com s3.amazonaws.com *.s3.amazonaws.com localhost:3010 localhost:3000 gapi.storyblok.com *.mapbox.com *.optimizely.com *.onetrust.com *.stickyadstv.com *.stackadapt.com *.yahoo.com *.pubmatic.com exclaimer.pinpointhq.com *.driftt.com *.googletagmanager.com *.google-analytics.com *.netlify.app *.netlify.com *.linkedin.com *.vimeo.com *.wistia.com *.youtube.com *.googleoptimize.com *.google.com *.google.co.uk *.google.ca *.google.de *.google.fr *.google.it *.google.es *.google.nl *.google.au *.googlesyndication.com *.6sc.co *.pro-market.net *.simpli.fi *.zopim.com *.zendesk.com *.pardot.com *.hotjar.com *.hotjar.io *.ads-twitter.com *.bing.com bat.bing.net bat.bing-int.com *.redditstatic.com *.reddit.com *.googleadservices.com *.doubleclick.net *.tremorhub.com *.tapad.com *.exelator.com *.intentiq.com *.bluekai.com *.crwdcntrl.net *.openx.net *.adnxs.com *.navattic.com *.zdassets.com *.licdn.com *.lijit.com *.spotxchange.com *.facebook.net *.facebook.com *.g2crowd.com zoominfo.com *.zoominfo.com *.cloud-ingenuity.com *.oribi.io *.agkn.com *.salesloft.com *.6sense.com *.twitter.com t.co *.liadm.com *.bfmio.com *.rlcdn.com *.rubiconproject.com *.1rx.io *.3lift.com wss://*.zopim.com wss://ws.hotjar.com calendly.com *.calendly.com surveymonkey.com *.surveymonkey.com *.surveymonkey.net *.surveymonkey.co.uk fast.wistia.net heapanalytics.com *.heapanalytics.com *.auryc.com *.mutinycdn.com *.mutinyhq.io *.adroll.com maxcdn.bootstrapcdn.com ajax.googleapis.com services.postcodeanywhere.co.uk ingesteer.services-prod.nsvcs.net *.chilipiper.com smooch.io *.smooch.io *.webloader.smooch.io s.ad.smaato.net api.exchangerate-api.com *.zi-scripts.com *.lkqd.net pippio.com *.sentry-cdn.com chat.onmaven.app *.sopro.io *.heap-api.com *.contentsquare.net *.contentsquare.com *.azurewebsites.net *.greenhouse.io *.hs-scripts.com *.hs-analytics.net *.adsrvr.org *.hs-banner.com *.hscollectedforms.net *.hubspot.com *.hsforms.com *.hsforms.net *.hsadspixel.net play.goconsensus.com *.jsdelivr.net *.hockeystack.com *.cloudflareinsights.com *.hubapi.com *.hsappstatic.net fonts.googleapis.com lh3.googleusercontent.com *.capterra.com qvdt3feo.com *.byspotify.com *.spotify.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: exclaimer.com *.exclaimer.com csxd.exclaimer.net csxd.exclaimer.com *.storyblok.com s3.amazonaws.com *.s3.amazonaws.com localhost:3010 localhost:3000 gapi.storyblok.com *.mapbox.com *.optimizely.com *.onetrust.com *.stickyadstv.com *.stackadapt.com *.yahoo.com *.pubmatic.com exclaimer.pinpointhq.com *.driftt.com *.googletagmanager.com *.google-analytics.com *.netlify.app *.netlify.com *.linkedin.com *.vimeo.com *.wistia.com *.youtube.com *.googleoptimize.com *.google.com *.google.co.uk *.google.ca *.google.de *.google.fr *.google.it *.google.es *.google.nl *.google.au *.googlesyndication.com *.6sc.co *.pro-market.net *.simpli.fi *.zopim.com *.zendesk.com *.pardot.com *.hotjar.com *.hotjar.io *.ads-twitter.com *.bing.com bat.bing.net bat.bing-int.com *.redditstatic.com *.reddit.com *.googleadservices.com *.doubleclick.net *.tremorhub.com *.tapad.com *.exelator.com *.intentiq.com *.bluekai.com *.crwdcntrl.net *.openx.net *.adnxs.com *.navattic.com *.zdassets.com *.licdn.com *.lijit.com *.spotxchange.com *.facebook.net *.facebook.com *.g2crowd.com zoominfo.com *.zoominfo.com *.cloud-ingenuity.com *.oribi.io *.agkn.com *.salesloft.com *.6sense.com *.twitter.com t.co *.liadm.com *.bfmio.com *.rlcdn.com *.rubiconproject.com *.1rx.io *.3lift.com wss://*.zopim.com wss://ws.hotjar.com calendly.com *.calendly.com surveymonkey.com *.surveymonkey.com *.surveymonkey.net *.surveymonkey.co.uk fast.wistia.net heapanalytics.com *.heapanalytics.com *.auryc.com *.mutinycdn.com *.mutinyhq.io *.adroll.com maxcdn.bootstrapcdn.com ajax.googleapis.com services.postcodeanywhere.co.uk ingesteer.services-prod.nsvcs.net *.chilipiper.com smooch.io *.smooch.io *.webloader.smooch.io s.ad.smaato.net api.exchangerate-api.com *.zi-scripts.com *.lkqd.net pippio.com *.sentry-cdn.com chat.onmaven.app *.sopro.io *.heap-api.com *.contentsquare.net *.contentsquare.com *.azurewebsites.net *.greenhouse.io *.hs-scripts.com *.hs-analytics.net *.adsrvr.org *.hs-banner.com *.hscollectedforms.net *.hubspot.com *.hsforms.com *.hsforms.net *.hsadspixel.net play.goconsensus.com *.jsdelivr.net *.hockeystack.com *.cloudflareinsights.com *.hubapi.com *.hsappstatic.net fonts.googleapis.com lh3.googleusercontent.com *.capterra.com qvdt3feo.com *.byspotify.com *.spotify.com t.contentsquare.net app.contentsquare.com; img-src 'self' data: blob: exclaimer.com *.exclaimer.com csxd.exclaimer.net csxd.exclaimer.com *.storyblok.com s3.amazonaws.com *.s3.amazonaws.com localhost:3010 localhost:3000 gapi.storyblok.com *.mapbox.com *.optimizely.com *.onetrust.com *.stickyadstv.com *.stackadapt.com *.yahoo.com *.pubmatic.com exclaimer.pinpointhq.com *.driftt.com *.googletagmanager.com *.google-analytics.com *.netlify.app *.netlify.com *.linkedin.com *.vimeo.com *.wistia.com *.youtube.com *.googleoptimize.com *.google.com *.google.co.uk *.google.ca *.google.de *.google.fr *.google.it *.google.es *.google.nl *.google.au *.googlesyndication.com *.6sc.co *.pro-market.net *.simpli.fi *.zopim.com *.zendesk.com *.pardot.com *.hotjar.com *.hotjar.io *.ads-twitter.com *.bing.com bat.bing.net bat.bing-int.com *.redditstatic.com *.reddit.com *.googleadservices.com *.doubleclick.net *.tremorhub.com *.tapad.com *.exelator.com *.intentiq.com *.bluekai.com *.crwdcntrl.net *.openx.net *.adnxs.com *.navattic.com *.zdassets.com *.licdn.com *.lijit.com *.spotxchange.com *.facebook.net *.facebook.com *.g2crowd.com zoominfo.com *.zoominfo.com *.cloud-ingenuity.com *.oribi.io *.agkn.com *.salesloft.com *.6sense.com *.twitter.com t.co *.liadm.com *.bfmio.com *.rlcdn.com *.rubiconproject.com *.1rx.io *.3lift.com wss://*.zopim.com wss://ws.hotjar.com calendly.com *.calendly.com surveymonkey.com *.surveymonkey.com *.surveymonkey.net *.surveymonkey.co.uk fast.wistia.net heapanalytics.com *.heapanalytics.com *.auryc.com *.mutinycdn.com *.mutinyhq.io *.adroll.com maxcdn.bootstrapcdn.com ajax.googleapis.com services.postcodeanywhere.co.uk ingesteer.services-prod.nsvcs.net *.chilipiper.com smooch.io *.smooch.io *.webloader.smooch.io s.ad.smaato.net api.exchangerate-api.com *.zi-scripts.com *.lkqd.net pippio.com *.sentry-cdn.com chat.onmaven.app *.sopro.io *.heap-api.com *.contentsquare.net *.contentsquare.com *.azurewebsites.net *.greenhouse.io *.hs-scripts.com *.hs-analytics.net *.adsrvr.org *.hs-banner.com *.hscollectedforms.net *.hubspot.com *.hsforms.com *.hsforms.net *.hsadspixel.net play.goconsensus.com *.jsdelivr.net *.hockeystack.com *.cloudflareinsights.com *.hubapi.com *.hsappstatic.net fonts.googleapis.com lh3.googleusercontent.com *.capterra.com qvdt3feo.com *.byspotify.com *.spotify.com *.contentsquare.net *.bidswitch.net *.eyeota.net *.casalemedia.com *.outbrain.com *.taboola.com ml314.com *.demdex.net; connect-src 'self' https://www.gstatic.com/ blob: data: exclaimer.com *.exclaimer.com csxd.exclaimer.net csxd.exclaimer.com *.storyblok.com s3.amazonaws.com *.s3.amazonaws.com localhost:3010 localhost:3000 gapi.storyblok.com *.mapbox.com *.optimizely.com *.onetrust.com *.stickyadstv.com *.stackadapt.com *.yahoo.com *.pubmatic.com exclaimer.pinpointhq.com *.driftt.com *.googletagmanager.com *.google-analytics.com *.netlify.app *.netlify.com *.linkedin.com *.vimeo.com *.wistia.com *.youtube.com *.googleoptimize.com *.google.com *.google.co.uk *.google.ca *.google.de *.google.fr *.google.it *.google.es *.google.nl *.google.au *.googlesyndication.com *.6sc.co *.pro-market.net *.simpli.fi *.zopim.com *.zendesk.com *.pardot.com *.hotjar.com *.hotjar.io *.ads-twitter.com *.bing.com bat.bing.net bat.bing-int.com *.redditstatic.com *.reddit.com *.googleadservices.com *.doubleclick.net *.tremorhub.com *.tapad.com *.exelator.com *.intentiq.com *.bluekai.com *.crwdcntrl.net *.openx.net *.adnxs.com *.navattic.com *.zdassets.com *.licdn.com *.lijit.com *.spotxchange.com *.facebook.net *.facebook.com *.g2crowd.com zoominfo.com *.zoominfo.com *.cloud-ingenuity.com *.oribi.io *.agkn.com *.salesloft.com *.6sense.com *.twitter.com t.co *.liadm.com *.bfmio.com *.rlcdn.com *.rubiconproject.com *.1rx.io *.3lift.com wss://*.zopim.com wss://ws.hotjar.com calendly.com *.calendly.com surveymonkey.com *.surveymonkey.com *.surveymonkey.net *.surveymonkey.co.uk fast.wistia.net heapanalytics.com *.heapanalytics.com *.auryc.com *.mutinycdn.com *.mutinyhq.io *.adroll.com maxcdn.bootstrapcdn.com ajax.googleapis.com services.postcodeanywhere.co.uk ingesteer.services-prod.nsvcs.net *.chilipiper.com smooch.io *.smooch.io *.webloader.smooch.io s.ad.smaato.net api.exchangerate-api.com *.zi-scripts.com *.lkqd.net pippio.com *.sentry-cdn.com chat.onmaven.app *.sopro.io *.heap-api.com *.contentsquare.net *.contentsquare.com *.azurewebsites.net *.greenhouse.io *.hs-scripts.com *.hs-analytics.net *.adsrvr.org *.hs-banner.com *.hscollectedforms.net *.hubspot.com *.hsforms.com *.hsforms.net *.hsadspixel.net play.goconsensus.com *.jsdelivr.net *.hockeystack.com *.cloudflareinsights.com *.hubapi.com *.hsappstatic.net fonts.googleapis.com lh3.googleusercontent.com *.capterra.com qvdt3feo.com *.byspotify.com *.spotify.com *.contentsquare.net *.litix.io; style-src 'self' 'unsafe-inline' data: blob: exclaimer.com *.exclaimer.com csxd.exclaimer.net csxd.exclaimer.com *.storyblok.com s3.amazonaws.com *.s3.amazonaws.com localhost:3010 localhost:3000 gapi.storyblok.com *.mapbox.com *.optimizely.com *.onetrust.com *.stickyadstv.com *.stackadapt.com *.yahoo.com *.pubmatic.com exclaimer.pinpointhq.com *.driftt.com *.googletagmanager.com *.google-analytics.com *.netlify.app *.netlify.com *.linkedin.com *.vimeo.com *.wistia.com *.youtube.com *.googleoptimize.com *.google.com *.google.co.uk *.google.ca *.google.de *.google.fr *.google.it *.google.es *.google.nl *.google.au *.googlesyndication.com *.6sc.co *.pro-market.net *.simpli.fi *.zopim.com *.zendesk.com *.pardot.com *.hotjar.com *.hotjar.io *.ads-twitter.com *.bing.com bat.bing.net bat.bing-int.com *.redditstatic.com *.reddit.com *.googleadservices.com *.doubleclick.net *.tremorhub.com *.tapad.com *.exelator.com *.intentiq.com *.bluekai.com *.crwdcntrl.net *.openx.net *.adnxs.com *.navattic.com *.zdassets.com *.licdn.com *.lijit.com *.spotxchange.com *.facebook.net *.facebook.com *.g2crowd.com zoominfo.com *.zoominfo.com *.cloud-ingenuity.com *.oribi.io *.agkn.com *.salesloft.com *.6sense.com *.twitter.com t.co *.liadm.com *.bfmio.com *.rlcdn.com *.rubiconproject.com *.1rx.io *.3lift.com wss://*.zopim.com wss://ws.hotjar.com calendly.com *.calendly.com surveymonkey.com *.surveymonkey.com *.surveymonkey.net *.surveymonkey.co.uk fast.wistia.net heapanalytics.com *.heapanalytics.com *.auryc.com *.mutinycdn.com *.mutinyhq.io *.adroll.com maxcdn.bootstrapcdn.com ajax.googleapis.com services.postcodeanywhere.co.uk ingesteer.services-prod.nsvcs.net *.chilipiper.com smooch.io *.smooch.io *.webloader.smooch.io s.ad.smaato.net api.exchangerate-api.com *.zi-scripts.com *.lkqd.net pippio.com *.sentry-cdn.com chat.onmaven.app *.sopro.io *.heap-api.com *.contentsquare.net *.contentsquare.com *.azurewebsites.net *.greenhouse.io *.hs-scripts.com *.hs-analytics.net *.adsrvr.org *.hs-banner.com *.hscollectedforms.net *.hubspot.com *.hsforms.com *.hsforms.net *.hsadspixel.net play.goconsensus.com *.jsdelivr.net *.hockeystack.com *.cloudflareinsights.com *.hubapi.com *.hsappstatic.net fonts.googleapis.com lh3.googleusercontent.com *.capterra.com qvdt3feo.com *.byspotify.com *.spotify.com; font-src 'self' a.storyblok.com maxcdn.bootstrapcdn.com fast.wistia.com fonts.gstatic.com data:; object-src 'none'; frame-ancestors 'self' localhost:3000 localhost:3010 *.storyblok.com *.netlify.app *.greenhouse.io *.g2crowd.com *.mutinycdn.com *.mutinyhq.io *.capterra.com *.chilipiper.com;
default-src
Keyword
—
'self'
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
default-src
Host
—
script-src
Keyword
—
'self'
script-src
Keyword
—
'unsafe-inline'
script-src
Keyword
—
'unsafe-eval'
script-src
Scheme
—
blob:
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
script-src
Host
—
img-src
Keyword
—
'self'
img-src
Scheme
—
data:
img-src
Scheme
—
blob:
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
connect-src
Keyword
—
'self'
connect-src
Scheme
—
blob:
connect-src
Scheme
—
data:
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
style-src
Scheme
—
data:
style-src
Scheme
—
blob:
style-src
Host
—
style-src
Host
—
style-src
Host
—
style-src
Host
—
style-src
Host
—
style-src
Host
—
style-src
Host
—
style-src
Host
—
style-src
Host
—
style-src
Host
—
style-src
Host
—
style-src
Host
—
style-src
Host
—
style-src
Host
—
style-src
Host
—
font-src
Keyword
—
'self'
font-src
Scheme
—
data:
object-src
Keyword
—
'none'
frame-ancestors
Keyword
—
'self'
frame-ancestors
Host
—
frame-ancestors
Host
—
Content-Security-Policy-Report-Only
No report-only CSP headers found.