Open
Cached
·
just now
6
directives
Content-Security-Policy
Content-Security-Policy: img-src 'self' https://assets.bitso.com *.hsforms.com *.hsforms.net *.hubspot.com *.hubspot.net blob: data: https://t.co https://static.zdassets.com https://accounts.zendesk.com https://*.zendesk.com https://media.smooch.io https://*.zdusercontent.com https://ad.360yield.com https://ad.yieldlab.net https://ade.clmbtech.com https://ads.stickyadstv.com https://alb.reddit.com https://analytics.google.com https://analytics.twitter.com https://api.hubapi.com https://assets.bitso.com https://bitsohelp.zendesk.com https://c.bing.com https://cds.taboola.com https://cm.adgrx.com/bridge https://cm.g.doubleclick.net https://contextual.media.net https://criteo-partners.tremorhub.com https://criteo-sync.teads.tv https://dev.visualwebsiteoptimizer.com https://dis.criteo.com https://dis.criteo.com https://dpm.demdex.net https://e1.emxdgt.com/put https://eb2.3lift.com https://exchange.mediavine.com https://googleads.g.doubleclick.net https://www.gravatar.com https://gum.criteo.com https://i.liadm.com https://ib.adnxs.com https://images.ctfassets.net https://jadserve.postrelease.com/suid/1017 https://match.sharethrough.com https://matching.ivitrack.com https://mobileassets.bitso.com https://p.adsymptotic.com https://pixel.rubiconproject.com https://px.ads.linkedin.com https://px4.ads.linkedin.com/collect https://r.casalemedia.com https://rtb-csync.smartadserver.com https://s.ad.smaato.net https://simage2.pubmatic.com https://static.zdassets.com https://stats.g.doubleclick.net https://sync-criteo.ads.yieldmo.com https://sync-t1.taboola.com https://sync.1rx.io/usersync/criteodsp https://sync.1rx.io/usersync/criteodsp/k-P2ulDsYERzzfj-AD1mLMiL7Z9aICS2vfceIQGQ https://sync.aralego.com/idSync https://sync.aralego.com/idSync/ https://sync.outbrain.com https://sync.targeting.unrulymedia.com/csync https://tags.bluekai.com https://tg.socdm.com https://trc-events.taboola.com https://trends.revcontent.com https://visitor.omnitagjs.com https://visitor.omnitagsjs.com https://visitor.omnitagsjs.com https://www.facebook.com https://www.google-analytics.com https://www.google-analytics.com https://www.google.com.br/ads/ga-audiences https://www.google.com.br/pagead https://www.google.com.br/pagead/1p-user-list/16604673499 https://www.google.com.br/pagead/1p-user-list/16604673499/ https://www.google.com.mx https://www.google.com https://www.googletagmanager.com https://x.bidswitch.net https://app.adjust.world/session https://app.adjust.world https://app.adjust.com ups.analytics.yahoo.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fast.appcues.com https://fonts.googleapis.com https://storage.googleapis.com; media-src 'self' https://static.zdassets.com; frame-src 'self' https://bitsohelp.zendesk.com https://boards.greenhouse.io https://job-boards.greenhouse.io https://bitso.com; connect-src 'self' https://bitso.com *.hs-analytics.net *.hs-banner.com *.hs-scripts.com *.hsadspixel.net *.hscollectedforms.net *.hsforms.com *.hsforms.net *.hsleadflows.net *.hubspot.com *.hubspot.net *.hubspotfeedback.com *.usemessages.com feedback.hubapi.com https://boards.greenhouse.io https://boards-api.greenhouse.io https://*.zdassets.com https://static.zdassets.com https://ekr.zdassets.com https://ekr.zendesk.com https://*.zendesk.com https://*.smooch.io https://api.smooch.io https://media.smooch.io https://zendesk-eu.my.sentry.io https://*.ingest.sentry.io https://*.twilio.com http://api.amplitude.com http://cdn.taboola.com/libtrc/unip http://cdn.taboola.com/libtrc/unip/1448272/tfa.js http://dynamic.criteo.com/js/ld/ld.js http://fast.appcues.com http://pixel.mathtag.com/event/js http://pixel.mathtag.com/oevent/js http://www.google-analytics.com/analytics.js http://www.googletagmanager.com https://a2.adform.net/Serving/TrackPoint/ https://amplitude.bitso.com https://analytics.google.com https://analytics.tiktok.com/api/v2/monitor https://analytics.tiktok.com/api/v2/pixel https://analytics.tiktok.com/api/v2/pixel/act https://analytics.tiktok.com/i18n/pixel/events.js https://analytics.tiktok.com/i18n/pixel/static/identify_c2008b8c.js https://analytics.tiktok.com/i18n/pixel/static/main.MTkwN2JhZDdhNA.js https://analytics.tiktok.com/i18n/pixel/static/main.MTkwN2JhZDdhNA.js https://api.hubapi.com https://api.hubspot.com https://api.lab.amplitude.com https://api.segment.io https://api.smooch.io/faye https://bitso.statuspage.io https://bitsohelp.zendesk.com https://cdn.amplitude.com https://cdn.matomo.cloud/reverseads.matomo.cloud https://cdn.matomo.cloud/reverseads.matomo.cloud/container_s1jZjiVL.js https://cdn.segment.com https://cdn.taboola.com/scripts/cds-pips.js https://cdn.taboola.com/scripts/eid.es5.js https://cds.taboola.com https://cgw.bitso.com https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/signals/config/1018575448661820 https://connect.facebook.net/signals/config/186614296776384 https://connect.facebook.net/signals/config/2207664046137135 https://connect.facebook.net/signals/config/227520485531197 https://connect.facebook.net/signals/config/715174912450420 https://connect.facebook.net/signals/config/716834929017352 https://conversions-config.reddit.com/v1/pixel https://conversions-config.reddit.com/v1/pixel/error https://csmetrics.hotjar.com https://dev-amplitude.bitso.com https://dev-segment.bitso.com https://dev.visualwebsiteoptimizer.com https://docs.google.com https://e1.emxdgt.com/put https://ekr.zdassets.com https://forms.hsforms.com https://googleads.g.doubleclick.net https://googleads.g.doubleclick.net/pagead/viewthroughconversion https://in.hotjar.com https://logs.browser-intake-datadoghq.com https://measurement-api.criteo.com/register-trigger https://onelinksmartscript.appsflyer.com/onelink-smart-script-latest.js https://pips.taboola.com https://pixel-config.reddit.com/pixels https://pixel-config.reddit.com/pixels/t2_36lvg1kb/config https://psb.taboola.com/topics_api https://px.ads.linkedin.com/attribution_trigger https://px.ads.linkedin.com/wa/ https://px4.ads.linkedin.com/collect https://rum.browser-intake-datadoghq.com https://s2.adform.net/banners/scripts/st/trackpoint-async.js https://script.crazyegg.com https://segment.bitso.com https://snap.licdn.com/li.lms-analytics/insight.beta.min.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://sslwidget.criteo.com/event https://static.clevertap.com/js/clevertap.min.js https://static.hotjar.com https://static.zdassets.com https://stats.g.doubleclick.net https://status.bitso.com https://sync.aralego.com/idSync/ https://tags.cgcmd.globo.com/gp https://tags.cgcmd.globo.com/gp/3ba26cf5-4a8a-4e37-958d-7f4c04e75fa1.js https://trc-events.taboola.com https://trc.taboola.com/1448272/trc/3/json https://uptok-server-production-cyxmaabxjq-uc.a.run.app https://us1.clevertap-prod.com https://visitor.omnitagjs.com https://wa.appsflyer.com https://websdk.appsflyer.com/ https://www.bitso.com/g/collect https://www.google-analytics.com https://www.google.com.br/pagead/1p-user-list/16604673499 https://www.google.com/ccm/collect https://www.google.com/recaptcha/api.js https://www.googletagmanager.com https://www.gstatic.com/recaptcha/releases/-QbJqHfGOUB8nuVRLvzFLVed/recaptcha__en.js https://www.redditstatic.com/ads https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_36lvg1kb_telemetry https://www.redditstatic.com/ads/pixel.js https://app.adjust.world/session https://app.adjust.world https://app.adjust.com js.hscta.net static.hsappstatic.net us1.dashboard.clevertap.com wss://api.appcues.net wss://api.smooch.io/faye wss://widget-mediator.zopim.com wss://*.zendesk.com wss://api.smooch.io wss://voice-js.roaming.twilio.com
img-src
Keyword
—
'self'
img-src
Scheme
—
blob:
img-src
Scheme
—
data:
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
img-src
Host
—
font-src
Keyword
—
'self'
style-src
Keyword
—
'self'
style-src
Keyword
—
'unsafe-inline'
media-src
Keyword
—
'self'
frame-src
Keyword
—
'self'
connect-src
Keyword
—
'self'
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
connect-src
Host
—
Content-Security-Policy-Report-Only
No report-only CSP headers found.