Security Analysis Results

9e839fd44eb727ab-SEA

keep-alive

zstd

text/html; charset=utf-8

Mon, 06 Apr 2026 20:43:21 GMT

{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}

{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=9J%2BmA5t%2BSwwQdbE6nSD6AiSrpbIxdXwHsVgPdkoARkLyz39pC5ZFqU%2FBsXsKTZ6%2FmkDipfqRiXnlH3H71UY8MOojRFXLF6ek7xlvLR%2FGlvUWXiPf3Ni2iaPODlouFPdp8cPgP3q5RJo%3D"}]}

cloudflare

cfCacheStatus;desc="DYNAMIC" cfEdge;dur=18,cfOrigin;dur=162

chunked

RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding

Next.js

h3=":443"; ma=86400

public, s-maxage=3600, stale-while-revalidate=59

DYNAMIC

script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://connect.facebook.net https://*.clarity.ms https://r.wdfl.co https://*.posthog.com https://*.ingest.us.sentry.io https://googleads.g.doubleclick.net https://maps.googleapis.com https://maps.googleapis.com https://static.cloudflareinsights.com https://api-site-builder.tertulia.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://*.redditstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; connect-src 'self' http://localhost:8114 https://*.clarity.ms https://www.facebook.com https://www.google-analytics.com https://r.wdfl.co https://us.i.posthog.com https://*.posthog.com https://*.tertulia.com https://api.getrewardful.com/referrals/track https://*.ingest.us.sentry.io https://maps.googleapis.com/ https://*.googleapis.com https://*.gstatic.com https://www.google.com https://connect.facebook.net https://site-builder-prod-reader-magnets.s3.us-east-2.amazonaws.com/ https://site-builder-dev-reader-magnets.s3.us-east-2.amazonaws.com/ https://site-builder-dev-ecommerce.s3.us-east-2.amazonaws.com/ https://site-builder-prod-ecommerce.s3.us-east-2.amazonaws.com/ https://via.intercom.io https://api.intercom.io https://api.au.intercom.io https://api.eu.intercom.io https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://api-ping.intercom.io https://*.intercom-messenger.com wss://*.intercom-messenger.com https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io https://uploads.intercomcdn.com https://uploads.intercomcdn.eu https://uploads.au.intercomcdn.com https://uploads.eu.intercomcdn.com https://uploads.intercomusercontent.com https://static.intercomassets.eu https://static.au.intercomassets.com https://*.redditstatic.com https://*.reddit.com; frame-src https://*.google.com https://www.facebook.com https://www.youtube.com/ https://www.googletagmanager.com https://td.doubleclick.net/ https://widget.intercom.io https://*.intercom.io https://js.intercomcdn.com https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net; child-src 'self' https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net; worker-src 'self' blob: https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net; object-src 'none'; base-uri 'none'; form-action 'self' https://intercom.help https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io; img-src 'self' data: blob: https://*.googleapis.com https://*.gstatic.com https://*.clarity.ms https://*.bing.com https://*.cloudfront.net https://site-builder-prod-reader-magnets.s3.us-east-2.amazonaws.com https://site-builder-dev-ecommerce.s3.us-east-2.amazonaws.com https://site-builder-prod-ecommerce.s3.us-east-2.amazonaws.com/ https://*.facebook.com https://*.google.com https://*.google.com.ar https://*.google.com.mx https://*.google.com.br https://*.google.co.uk https://*.google.ca https://*.google.com.au https://*.google.es https://images.unsplash.com blob: data: https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://video-messages.intercomcdn.com https://messenger-apps.intercom.io https://messenger-apps.eu.intercom.io https://messenger-apps.au.intercom.io https://*.intercom-attachments-1.com https://*.intercom-attachments.eu https://*.au.intercom-attachments.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com https://static.intercomassets.eu https://static.au.intercomassets.com https://*.reddit.com; font-src 'self' https://fonts.gstatic.com https://js.intercomcdn.com https://fonts.intercomcdn.com; media-src 'self' https://js.intercomcdn.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com

</_next/static/media/e4af272ccee01ff0-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"

/baltazarcastillo-draftupg832

3c677fadc0dfe6e8f186889f1fadadba