Security Analysis Results

46120

h3=":443"; ma=86400

public, must-revalidate, proxy-revalidate, max-age=0, s-maxage=1209600

keep-alive

br

en-US

default-src 'self' https://app-cdn.clickup.com; script-src 'self' blob: 'wasm-unsafe-eval' https://apis.google.com https://accounts.google.com https://js.live.net https://app.box.com https://www.dropbox.com https://maps.googleapis.com https://cdn1.codox.io https://cdn1.stage.codox.io https://cdn2.stage.codox.io https://cdn.firstpromoter.com https://calendly.com https://miro.com https://platform.harvestapp.com https://*.wistia.com https://*.wistia.net https://src.litix.io https://*.daily.co https://api.daily.co https://zapier.com https://cdn.zapier.com https://ct.capterra.com https://*.clarity.ms https://www.googletagmanager.com https://www.googleadservices.com https://www.google-analytics.com https://ssl.google-analytics.com https://hat.thepointyspritesclub.com https://www.redditstatic.com https://googleads.g.doubleclick.net https://core.thepointyspritesclub.com https://m.servedby-buysellads.com https://c.amazon-adsystem.com https://canny.io https://sdk.canny.io https://snap.licdn.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/recaptcha/releases/ https://recaptcha.net/recaptcha/ https://*.sdk.awswaf.com https://*.token.awswaf.com https://connect.facebook.net https://x.clearbitjs.com https://s.pinimg.com https://sdk.minervaknows.com https://sdk-services.minervaknows.com https://pendo-io-static.storage.googleapis.com https://cdn.pendo.io https://pendo-static-5086206243897344.storage.googleapis.com https://data.pendo.io https://app.pendo.io https://content.webproduct.clickup.com https://data.webproduct.clickup.com 'sha256-4F3AlVDfHOAh+oYhZPs3EVMNLNadjO8On0Dw7KGh/0k=' 'sha256-HlaGGq5nhTgcEEAWmEiWF8Bdf6qDczq6wsXFnlEg7Tg=' https://fast.chameleon.io 'sha256-NztFZBIwTwKXUaLLqfhebVwi8A5ATSAjms62gQRI/yQ=' 'sha256-ZAv/hG6n0JedKoJr6z2AHTmkY7cKU/vhYWp5h3dVIsk=' https://cdn.pdst.fm https://d34r8q7sht0t9k.cloudfront.net/tag.js 'sha256-j2ps3etSlArdF3rx5RB3P1LHnZ5QaPvxPl1kLybUU1I=' todesktop-internal: https://code.highcharts.com https://embedding.workato.com https://static.zdassets.com https://*.zdassets.com https://*.zendesk.com https://*.smooch.io https://*.twilio.com https://*.tailwindcss.com https://unpkg.com/html2canvas https://unpkg.com/zone.js@0.14.4/bundles/zone.umd.min.js https://*.apis.google.com 'unsafe-hashes' 'sha256-rRMdkshZyJlCmDX27XnL7g3zXaxv7ei6Sg+yt4R3svU=' 'sha256-46mc3H6z56gnOReRHr//8M7FxjqtSaDN7KetqqduuiE=' 'sha256-lo7ZdP6kFds+wf1WMWvn7MhcFVFJV44kAXODRevzRZ8=' 'sha256-kjwZ9XFHUXkRgP39E+c2Nq0vJmP8LXFE0uBk6CONyps=' 'sha256-lYEr2zHO9mOSeyRaGwAV3ONrKh8W0bkmiI1dNP3XPw8=' 'sha256-LMJv8ESlfiCF+9pWKUez+VXyvZdYrT+fcQ3Eps4XPyQ=' 'sha256-O9aq+7SwZvvc0fhedjnYucjU23ErSZyDH2NlMpTcIrg=' 'sha256-crv0swrwxjIlHW1jNIPi6B6rE2DSmtsXQFN5PQKnM28=' 'sha256-18PfGZ5/htE/jRivbwelUdaz5nHCggm6Z4DwoAxuuuQ=' 'sha256-ZdDTEfl8xrGn7iZ/2mMDizDIe6JRmep2vz9STHJi4Zs=' 'sha256-XmUonDD4SHX/8KL3j/86z0J1usvsHZ1xoxcYIkK9ofY=' 'sha256-TMQYQm5DIUPhkboCV7JZ+UNcKeh2iHk2kDZ+GzVnZyM=' 'sha256-rv9RoPCujGN0BWUcqLIueZC4J98NAoFBaa2VQHSBLUA=' 'sha256-MhQnurjVkR0d3jTJlT4vDS8W1Ul2ufyOI9GbZmyONCc=' 'sha256-fkL1dWflM/Pp1A6PqNJzVUuQZHXkpviRNjFFgUWDc0o=' 'sha256-JrwHtCkAMCxphN8OUZ/8B2IOHBF0GxYQVm/u8lnHk5U=' 'sha256-aPtbM89KJ2QtT9b3cTayhhL6B9UAtlXVAIrISmkAqlo=' 'sha256-dplqP925cq1wFUU0QEM3ErDaKHbkInjAYRqinz3ckA4=' 'sha256-+WyYVdw/xyJMSon2S4rJiuvQwzfxnaOVyO9fBWnBdfI=' 'sha256-d53GrCUkhYjY5Gg+lvPu4EvwVHF469YN3xDuBKJ1zlw=' 'sha256-6YVBj8Dp8/hmBCVa1GkZq10MnLp4jxNZ7DlQg/1e9do=' 'sha256-c46qGWZpjsaDTejjs2vXcwKULa5GqfWHy6NpfRj7RLo=' 'sha256-NAVhSZ+FJwaLOVUVF5pNJJHxUVkbWK5v3gCC+rhwqUE=' 'sha256-9/0hd96qoXdEcT1/9WrK3RBCF0b9iAcQILT7kCdqymI=' 'sha256-8NDdvKWDYv66kjW9fgz/ZKScITpkp4dbsM+TA/O04RM=' 'sha256-d9X+lt79bIweOwRmtIJ8+D3H5ccnoQF34RXSUTL6hvY=' 'sha256-tfwk6Z/5gbYQErJTx0xXYv88nf2sOTB9ziGzTRM780I=' 'sha256-r0zKdIaVXL5La22Qv6w3BFOUx0ZioSsqoP8AOEdGty0=' 'sha256-4Hq8ngOaih5AFi/QwY8sfU4scUQ7UWGxcITuIl1h45Y=' 'sha256-G574QxiyzjYg5WRPE1EIV7ybIvR8RSwSodlLw3OSsSo=' 'sha256-62dGtgZECu/Vf7xGnq6kk2x9UEFtACjjvxdPXV22Y1I=' 'sha256-A1G2PMl7phK8KZzsPIbRZuxaapDp859I6mcj40iW1Vo=' 'sha256-J3lp2ucUq+OQgBYI0rDj0IUEuz0buuDTaQjYGjNVQgU=' 'sha256-HsDuP/JOW1/mYiKGwTIYa1MLC/2ccZaJNF8oxxGPr+I=' https://*.singular.com https://*.singular.net https://datadoghq.com https://tpc.googlesyndication.com https://*.walkme.com https://cdn.segment.com https://*.taboola.com https://*.pointmediatracker.com https://*.marketo.net https://pages.clickup.com https://*.facebook.net https://*.tiktok.com https://bat.bing.com https://*.onmaven.app https://songbirdstag.cardinalcommerce.com https://songbird.cardinalcommerce.com https://c.paypal.com https://embed.reddit.com https://platform.twitter.com https://app-cdn.clickup.com 'sha256-ovbcG8zmbRztTrVCfFHexGJvadUjpY6v6EI4NUc1eAM=' 'sha256-QVSpuaqrs0yoPQiKRVkwHgq7mCkE3sHNNPed2OiXicQ=' 'sha256-BOXVLXFPfAt5eXQqH2vPi9hzSNa42WqRqPnSMyiUkOI=' 'sha256-gIpj8A3xGGQj7GU4EokhMYsPEjB9PFrSvUVp+Lgx/i0=' 'sha256-m13PiXL7995vFpEP/rHKAgViy1NQTumS+8XYyAxahoM=' 'sha256-CyvXhnqMWAHfl6KTNWOMKW+MYZxxKoA5NDWqev7PT4c=' 'sha256-B2kxRjhMdGCYsQYZvkTf08pRUd6JkeoMt2lF/BzLWZM=' 'sha256-56ZYEriWOWQ0PsuTe3xfu3W9CHDY0ykAeVKBPhHmmPo=' 'sha256-jQc+S/xahZrJw9hvwbUp2nnSUmqCmqSn00pUbIDHKaA=' 'sha256-nig2gqqEaSjy9POcL9665PIy5m4v5nw66/VokfjM40g=' 'sha256-UK8wVAdkuLsLc3OmXwFyMuegtPwQkuyiFPKVf06nqgQ=' 'sha256-eDltsuMj24G6k47tpm1t1OpWF7el0KRlcs21TUuIJ9o=' 'sha256-4rtKqPm19oBcDU+iAhmbAgRU9ZJ2Pi4odxAxreQIyOQ=' 'sha256-BYMeEArz840c0XqyHvCyWjKG8NDHmDWAanoxML5rVt0=' 'sha256-ZzPgGdmaHTwQteVLydL1j2SNd1OkNJycL8CyMlZieOE=' 'sha256-o8icxqRcB2GFcaHQLfV/fAeFKh/mh09e3VjQfvPSO+0='; style-src 'self' 'unsafe-inline' https://cdn1.codox.io https://cdn.zapier.com https://accounts.google.com https://app.pendo.io https://cdn.pendo.io https://pendo-static-5086206243897344.storage.googleapis.com https://content.webproduct.clickup.com blob: https://fast.wistia.com https://fonts.googleapis.com https://*.walkme.com https://pages.clickup.com https://app-cdn.clickup.com; img-src 'self' data: https: http: https://www.google.com https://unpkg.com https://q.quora.com https://alb.reddit.com https://www.google-analytics.com https://www.google.co.uk https://www.googletagmanager.com https://core.thepointyspritesclub.com https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net https://*.clarity.ms https://insight.adsrvr.org blob: https://www.facebook.com https://zapier-images.imgix.net https://zapier.com https://cdn.pendo.io https://app.pendo.io https://pendo-static-5086206243897344.storage.googleapis.com https://data.pendo.io https://data.webproduct.clickup.com https://content.webproduct.clickup.com https://tracking.g2crowd.com https://*.giphy.com https://maps.gstatic.com https://maps.googleapis.com https://*.googleapis.com https://*.ggpht.com https://*.githubusercontent.com https://secure.gravatar.com https://www.linkedin.com https://*.walkme.com https://s3.walkmeusercontent.com https://d3sbxpiag177w8.cloudfront.net https://static.zdassets.com https://*.zendesk.com https://media.smooch.io https://*.zdusercontent.com https://attachments.clickup.com https://attachments2.clickup.com https://*.p.clickup-attachments.com https://*.ps.clickup-attachments.com https://id.app.clickup.com https://app-cdn.clickup.com; font-src 'self' data: https://*.wistia.com https://fonts.gstatic.com https://fonts.googleapis.com https://*.walkme.com https://*.apis.google.com https://apis.google.com https://app-cdn.clickup.com; form-action 'self' https: https://canny.io https://connect.facebook.net; media-src 'self' blob: data: https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net https://static.zdassets.com https://attachments.clickup.com https://attachments2.clickup.com https://*.p.clickup-attachments.com https://*.ps.clickup-attachments.com https://id.app.clickup.com https://app-cdn.clickup.com; connect-src 'self' https://api.exchangeratesapi.io https://maps.googleapis.com https://*.clarity.ms https://*.daily.co wss://*.daily.co https://*.pluot.blue https://sdk.split.io https://events.split.io https://auth.split.io https://streaming.split.io wss://proxy.clickup.codox.io wss://sm-dsm.stage.codox.io https://alb.clickup.codox.io https://sentry.io https://browser-http-intake.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://payments.sandbox.braintree-api.com https://origin-analytics-sand.sandbox.braintree-api.com https://*.braintree-api.com https://*.cardinalcommerce.com https://api.allorigins.win https://www.google-analytics.com https://core.thepointyspritesclub.com https://stats.g.doubleclick.net https://canny.io https://www.facebook.com https://sdk.minervaknows.com https://api.minervaknows.com https://api.zapier.com https://zapier.com https://x.clearbit.com https://*.zendesk.com https://*.smooch.io https://*.ingest.sentry.io https://*.twilio.com wss://*.zendesk.com wss://api.smooch.io wss://voice-js.roaming.twilio.com https://app.pendo.io https://data.pendo.io https://pendo-static-5086206243897344.storage.googleapis.com https://us-central1-adaptive-growth.cloudfunctions.net https://api.giphy.com https://*.litix.io https://*.wistia.com https://embedwistia-a.akamaihd.net https://*.walkme.com https://*.workato.com wss://search.clickup-qa.com wss://frontdoor-search.clickup-qa.com wss://search.clickup-staging.com wss://frontdoor-search.clickup-staging.com wss://search.clickup-prod.com wss://frontdoor-search.clickup-prod.com wss://search.clickup-eu.com wss://frontdoor-search.clickup-eu.com wss://search.clickup-au.com wss://frontdoor-search.clickup-au.com wss://search.clickup-sg.com wss://frontdoor-search.clickup-sg.com https://*.pointmediatracker.com https://*.marketo.net https://*.facebook.net https://*.tiktok.com http://localhost:23435 http://localhost:39214 http://127.0.0.1:23435 http://127.0.0.1:39214 https://attachments.clickup.com https://attachments2.clickup.com https://*.p.clickup-attachments.com https://*.ps.clickup-attachments.com https://id.app.clickup.com https://invoices.clickup.com https://export.clickup.com https://gantt-export-prod.clickup.com wss://*.clickup.com wss://cu-prod-or-coeditor.clickup.com wss://ws.clickup.com wss://na001-ws.clickup.com wss://eu001-ws.clickup.com wss://ap001-ws.clickup.com wss://sa001-ws.clickup.com https://attch.clickup.com https://form-submit.clickup.com blob: https://apis.google.com https://accounts.google.com https://js.live.net https://app.box.com https://www.dropbox.com https://cdn1.codox.io https://cdn1.stage.codox.io https://cdn2.stage.codox.io https://cdn.firstpromoter.com https://calendly.com https://miro.com https://platform.harvestapp.com https://*.wistia.net https://src.litix.io https://api.daily.co https://cdn.zapier.com https://ct.capterra.com https://www.googletagmanager.com https://www.googleadservices.com https://ssl.google-analytics.com https://hat.thepointyspritesclub.com https://www.redditstatic.com https://googleads.g.doubleclick.net https://m.servedby-buysellads.com https://c.amazon-adsystem.com https://sdk.canny.io https://snap.licdn.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/recaptcha/releases/ https://recaptcha.net/recaptcha/ https://*.sdk.awswaf.com https://*.token.awswaf.com https://connect.facebook.net https://x.clearbitjs.com https://s.pinimg.com https://sdk-services.minervaknows.com https://pendo-io-static.storage.googleapis.com https://cdn.pendo.io https://content.webproduct.clickup.com https://data.webproduct.clickup.com https://fast.chameleon.io https://cdn.pdst.fm https://d34r8q7sht0t9k.cloudfront.net/tag.js todesktop-internal: https://code.highcharts.com https://embedding.workato.com https://static.zdassets.com https://*.zdassets.com https://*.tailwindcss.com https://unpkg.com/html2canvas https://unpkg.com/zone.js@0.14.4/bundles/zone.umd.min.js https://*.apis.google.com https://*.singular.com https://*.singular.net https://datadoghq.com https://tpc.googlesyndication.com https://cdn.segment.com https://*.taboola.com https://pages.clickup.com https://bat.bing.com https://*.onmaven.app https://songbirdstag.cardinalcommerce.com https://songbird.cardinalcommerce.com https://c.paypal.com https://embed.reddit.com https://platform.twitter.com https://app-cdn.clickup.com https://fast.wistia.com https://fonts.googleapis.com https: https://www.google.com https://unpkg.com https://q.quora.com https://alb.reddit.com https://www.google.co.uk https://insight.adsrvr.org https://zapier-images.imgix.net https://tracking.g2crowd.com https://*.giphy.com https://maps.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.githubusercontent.com https://secure.gravatar.com https://www.linkedin.com https://s3.walkmeusercontent.com https://d3sbxpiag177w8.cloudfront.net https://media.smooch.io https://*.zdusercontent.com https://fonts.gstatic.com; child-src 'self' blob: https://www.youtube.com https://player.vimeo.com https://fast.wistia.net https://www.facebook.com https://staticxx.facebook.com https://sdk-services.minervaknows.com https://*.walkme.com; frame-src https:; manifest-src 'self' https://app-cdn.clickup.com; object-src 'none'; frame-ancestors 'self'

text/html; charset=utf-8

Thu, 07 May 2026 02:43:09 GMT

include-js-call-stacks-in-crash-reports

W/"5cc2922e5fc54eb3a9b647a8da61bfe1"

Thu, 07 May 2026 02:42:15 GMT

default="https://id.app.clickup.com/data/v3/utils/frontend_observability/browser_reporting"

AmazonS3

cdn-cache-hit,cdn-pop;desc="IAD55-P1",cdn-rid;desc="DGcmMN87tAJUuoXIZihuBcDRBaGmskthkBVVNaIMxi-H5wEWrW5u3w==",cdn-hit-layer;desc="EDGE",cdn-downstream-fbl;dur=3

max-age=31536000; includeSubDomains

chunked

Accept-Encoding Origin

1.1 b6caa49e59026d07a8e0859900a10572.cloudfront.net (CloudFront)

DGcmMN87tAJUuoXIZihuBcDRBaGmskthkBVVNaIMxi-H5wEWrW5u3w==

IAD55-P1

AES256

null

Hit from cloudfront

nosniff

off

noopen

none

0