Description:

Google API JavaScript Client Library is a JavaScript library that simplifies accessing Google APIs from web applications. It provides authentication, request handling, and response processing to help developers integrate Google services like Gmail, Drive, and Calendar into their web applications.

Evidence:

• • Header Content-Security-Policy-Report-Only (style-src): https://googleapis.com

Description:

Google Sign-In (Google Identity Services) is an authentication service that allows users to sign in to websites and applications using their Google accounts. It provides secure authentication, user profile information, and OAuth integration to help developers implement social login functionality.

Evidence:

• • HTML <script>: https://accounts.google.com/gsi/client
• • HTML <script>: https://accounts.google.com/gsi/client
• • HTML <script>: https://accounts.google.com/gsi/client

Description:

Entri is a link management and redirect service that helps businesses create, manage, and track short links and redirects. It provides APIs and tools for link shortening and redirect management.

Evidence:

• • Header Content-Security-Policy-Report-Only (frame-src): https://goentri.com
• • Header Content-Security-Policy-Report-Only (script-src): https://goentri.com
• • Header Content-Security-Policy-Report-Only (connect-src): https://goentri.com

Description:

Zendesk is a customer service and support platform that provides ticketing systems, help desk software, and customer communication tools. It helps businesses manage customer support requests, provide multichannel support, and improve customer satisfaction through organized support workflows.

Evidence:

• • Header Content-Security-Policy-Report-Only (script-src): https://*.zendesk.com
• • Header Content-Security-Policy-Report-Only (script-src): https://*.smooch.io
• • Header Content-Security-Policy-Report-Only (script-src): wss://*.zendesk.com
• • Header Content-Security-Policy-Report-Only (script-src): wss://api.smooch.io
• • Header Content-Security-Policy-Report-Only (connect-src): https://*.zendesk.com
• ... and 4 more

Description:

Bing is Microsoft's web search engine that provides web search results, images, videos, news, and maps. It powers search experiences across Microsoft products and is used by websites for search widgets and APIs.

Evidence:

• • Header Content-Security-Policy-Report-Only (frame-src): https://bing.com
• • Header Content-Security-Policy-Report-Only (frame-src): https://bing.net
• • Header Content-Security-Policy-Report-Only (script-src): https://bing.com
• • Header Content-Security-Policy-Report-Only (script-src): https://bing.net
• • Header Content-Security-Policy-Report-Only (connect-src): https://bing.com
• ... and 1 more

Description:

Cloudflare is a global cloud services provider that offers CDN, DDoS protection, DNS, security, and performance optimization services. It helps websites and applications improve speed, security, and reliability through its global network of data centers.

Evidence:

• • IP 2606:4700:4403:0:0:0:6812:2505 → ASN 13335 (Cloudflare)

Description:

Google Cloud Platform (GCP) is Google's comprehensive cloud computing platform that provides computing, storage, databases, networking, machine learning, and analytics services. It offers enterprise-grade cloud infrastructure and services for businesses of all sizes.

Evidence:

• • Header Content-Security-Policy-Report-Only (font-src): https://gstatic.com
• • Header Content-Security-Policy-Report-Only (script-src): https://www.gstatic.com/recaptcha/

Description:

Google Search is Google's web search engine that indexes and provides search results for websites and content across the internet. It's the most widely used search engine globally, providing search functionality and search-related services for users and businesses.

Evidence:

• • Header Content-Security-Policy-Report-Only (frame-src): https://google.com
• • Header Content-Security-Policy-Report-Only (script-src): https://www.google.com
• • Header Content-Security-Policy-Report-Only (connect-src): https://google.com

Description:

PS-CD is a continuous deployment and DevOps platform that helps development teams automate software deployment and delivery. It provides CI/CD pipelines, deployment automation, and infrastructure management tools to help teams deploy applications faster and more reliably.

Evidence:

• • DNS Record TXT: ps-cd-verification=3022a871-1413-4d14-a916-b0dd93c32dd6 (root domain: instapage.com)

Description:

Amazon SES (Simple Email Service) is a cloud-based email sending service from AWS that enables businesses to send transactional and marketing emails. It provides scalable email delivery, bounce and complaint handling, and email reputation management for applications and businesses.

Evidence:

• • DNS Record TXT: v=spf1 include:mailgun.org include:amazonses.com include:_spf.aireml.com ip4:69.72.45.245 ip4:69.72.45.76 ip4:198.244.59.155 -all

Description:

PHP is a popular server-side scripting language designed for web development. It's widely used for creating dynamic web pages and web applications, and powers many content management systems like WordPress, Drupal, and Joomla. PHP can be embedded in HTML and supports various databases and web servers.

Evidence:

• • Header Set-Cookie: PHPSESSID=ulb8k1odg355t907hovg90290vkck59ev5fg4bag8ot2p7dlvup3vtl18u0ubmtd; path=/; secure; HttpOnly; SameSite=none empty_folders=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/ CSRF_TOKEN=WLoXDhQhg1kKkuHhEdAfKvf%2BgE4KTBp%2FQLTrGDQxjn2%2FlFgn6Hw03IUwFqieKPIKHBwQBciFVCQ4UFIwr01wjiu9Dkcs4FUdkBx0DkW4qmc%3D; path=/; secure CSRF_TOKEN=HtLdGO%2BjD8U0rv%2FNz1XDDimT%2FgBd8Geft4J27QVsO2kgerTxEsvtHWfLEp2BV4%2FWPOWSdmWzU7YIeyG1Asw22bxG%2B%2F8IHpBhZ9cSdQYbbT8%3D; path=/; secure __cf_bm=3Nj5Qw4jURMHxO0AdLa._2k6HVy2vr6xExXKzhhe1hk-1773277683-1.0.1.1-w9PDUwZzCJ1errT_PIQwTkzZHswsnBUxmqHdRUy3D717Huf9wtrAhmYLcaJshWGxzo1ADLJ0GqFyER7QelqPhXEnDdtGd9jbPCaqbUi8wkw; path=/; expires=Thu, 12-Mar-26 01:38:03 GMT; domain=.instapage.com; HttpOnly; Secure; SameSite=None

Description:

Sentry is an error tracking and performance monitoring platform that helps developers identify, debug, and resolve errors in their applications. It provides real-time error alerts, stack traces, performance monitoring, and release tracking to improve application reliability.

Evidence:

• • Header Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline' 'unsafe-eval'; frame-src *.instapage.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.marketo.net *.mbsy.co *.satismeter.com *.bing.com *.bing.net *.visualwebsiteoptimizer.com *.profitwell.com *.zi-scripts.com *.zoominfo.com *.mrkhub.com *.upsellit.com *.userpilot.io *.growsumo.com *.googlesyndication.com partnerlinks.io grsm.io instapage.com js.stripe.com *.doubleclick.net *.googletagmanager.com *.goentri.com; style-src 'self' 'unsafe-inline' *.googleapis.com https://*.userpilot.io *.userpilot.io wss://*.userpilot.io; img-src 'self' https:; font-src *.instapage.com *.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.instapage.com *.marketo.net *.mbsy.co *.satismeter.com *.bing.com *.bing.net *.visualwebsiteoptimizer.com *.profitwell.com *.zi-scripts.com *.zoominfo.com *.mrkhub.com *.upsellit.com *.userpilot.io *.growsumo.com *.googlesyndication.com partnerlinks.io grsm.io https://*.zdassets.com https://*.zendesk.com https://*.smooch.io https://zendesk-eu.my.sentry.io https://*.twilio.com wss://*.zendesk.com wss://api.smooch.io wss://voice-js.roaming.twilio.com https://*.userpilot.io *.userpilot.io wss://*.userpilot.io *.hotjar.com storage.googleapis.com *.cloudfront.net *.licdn.com *.googletagmanager.com *.segment.com *.google-analytics.com *.zopim.com *.doubleclick.net *.clarity.ms js.stripe.com www.googleadservices.com https://www.gstatic.com/recaptcha/ www.google.com tracker.totango.com connect.facebook.net *.goentri.com; connect-src 'self' *.instapage.com *.marketo.net *.mbsy.co *.satismeter.com *.bing.com *.bing.net *.visualwebsiteoptimizer.com *.profitwell.com *.zi-scripts.com *.zoominfo.com *.mrkhub.com *.upsellit.com *.userpilot.io *.growsumo.com *.googlesyndication.com partnerlinks.io grsm.io *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat https://*.zdassets.com https://*.zendesk.com https://*.smooch.io https://zendesk-eu.my.sentry.io https://*.twilio.com wss://*.zendesk.com wss://api.smooch.io wss://voice-js.roaming.twilio.com https://*.userpilot.io *.userpilot.io wss://*.userpilot.io *.hotjar.com *.hotjar.io *.mktoresp.com storage.googleapis.com *.linkedin.com *.segment.io *.segment.com *.zopim.com *.google-analytics.com ws: wss: *.clarity.ms www.googletagmanager.com *.doubleclick.net *.sentry.io sentry.io *.goentri.com; media-src 'self' *.zdassets.com; manifest-src 'self' storage.googleapis.com; report-uri /api/3/csp/violation-report
• • Header Content-Security-Policy-Report-Only (script-src): https://zendesk-eu.my.sentry.io
• • Header Content-Security-Policy-Report-Only (connect-src): https://zendesk-eu.my.sentry.io
• • Header Content-Security-Policy-Report-Only (connect-src): https://sentry.io

Description:

1Password is a password manager and digital vault that securely stores passwords, credit cards, documents, and other sensitive information. It provides secure password generation, autofill, and synchronization across devices, helping users maintain strong, unique passwords for all their accounts.

Evidence:

• • DNS Record TXT: 1password-site-verification=JNVOXM6FS5HTHH3BXIT745QU7E (root domain: instapage.com)