Evidence:

• • Header Content-Security-Policy-Report-Only (frame-src): https://storage.googleapis.com

Evidence:

• • Header Content-Security-Policy-Report-Only: default-src 'self'; base-uri 'self'; connect-src 'self' https://mighty-platform-dev.appspot.com https://staging-dot-mighty-platform-prod.appspot.com https://mighty-platform-prod.appspot.com https://*.googleapis.com https://*.segment.com https://*.segment.io https://*.intercom.io wss://*.intercom.io https://*.sentry.io https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.profitwell.com; font-src 'self' https:; form-action 'self'; frame-ancestors 'none'; frame-src 'self' https://mighty-platform-dev.firebaseapp.com https://mighty-platform-prod.firebaseapp.com https://*.stripe.com https://storage.googleapis.com https://*.hotjar.com; img-src 'self' data: https:; object-src 'none'; script-src 'self' https://*.stripe.com https://*.segment.com https://*.hotjar.com https://*.intercom.io https://*.intercomcdn.com https://apis.google.com https://*.profitwell.com; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; upgrade-insecure-requests;

Evidence:

• • WHOIS Registrar: Squarespace Domains II LLC