Security Analysis Results

https://public-uat.brochure-avanti.staysuregroup.com

9662fc43fe999d93-PHX

keep-alive

text/html; charset=utf-8

Mon, 28 Jul 2025 08:25:32 GMT

</_next/static/media/2ac022b07068fdd9-s.p.ttf>; rel=preload; as="font"; crossorigin=""; type="font/ttf", </_next/static/media/319a8efee436bf89-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/5fcb351c210cb0f3-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/79782d73113945ae-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"

{"success_fraction":0,"report_to":"cf-nel","max_age":604800}

{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qypN0%2BNCpSMN6UNimd%2FoXBi8F5MvQv5t%2Fbs2j%2F7lNeevLoGibQ9sfly6mQVUdPZu2jsc894UOtyYmbLJuoVxtZ6t7wBONk9kuo9X7TRBZFB%2F%2BXiDU5NVpwnRfHCeJ71QSci2O%2FQ3g05WH2mMwfNBTQ%3D%3D"}],"group":"cf-nel","max_age":604800}

cloudflare

chunked

RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding

Content-Type

GET, POST, PUT, DELETE

h3=":443"; ma=86400

default-src 'self' *.taboola.com *.hotjar.com script.infinity-tracking.com ajax.googleapis.com *.onetrust.com analytics.tiktok.com *.evergage.com *.stackadapt.com *.mention-me.com static.zdassets.com cdn-pci.optimizely.com *.googletagmanager.com widget-mediator.zopim.com www.google-analytics.com googleads.g.doubleclick.net bat.bing.com *.contentsquare.com *.contentsquare.net cdn.evgnet.com tags.srv.stackadapt.com cdn.taboola.com www.tag4arm.com connect.facebook.net trc.taboola.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.zdassets.com *.staysure.co.uk *.magnolia-platform.io webanalytics.interserv.co.uk static.cloudflareinsights.com www.googletagmanager.com cdn-ukwest.onetrust.com www.google-analytics.com bat.bing.com t.contentsquare.net static.hotjar.com www.tag4arm.com connect.facebook.net cdn.evgnet.com analytics.tiktok.com script.infinity-tracking.com script.hotjar.com api.smooch.io *.optimizely.com app.contentsquare.com *.googlesyndication.com *.tradedoubler.com *.mention-me.com berrythompson.innocraft.cloud snippet.maze.co cdn-assets-prod.s3.amazonaws.com tag4arm.azureedge.net dev.oathstudio.com *.staysuregroup.com staysure.boost.ai api.eu-1.smooch.io; style-src 'self' 'unsafe-inline' *.typekit.net cdnjs.cloudflare.com *.hotjar.com tags.srv.stackadapt.com *.staysure.co.uk *.magnolia-platform.io snippet.maze.co dev.oathstudio.com *.staysuregroup.com; child-src 'self' blob: td.doubleclick.net www.facebook.com *.cdn-pci.optimizely.com player.vimeo.com *.staysure.co.uk *.mention-me.com mention-me.com *.fls.doubleclick.net; img-src 'self' blob: data: placehold.co *.staysure.magnolia-platform.io *.staysure-prod.magnolia-platform.io ade.googlesyndication.com ad.doubleclick.net www.google-analytics.com cdn-ukwest.onetrust.com bat.bing.com www.google.ie www.google.co.uk www.google.com www.facebook.com staysure.zendesk.com static.zdassets.com www.googletagmanager.com *.contentsquare.net *.hotjar.com snippet.maze.co *.staysuregroup.com *.staysure.co.uk staysure1721655756.zendesk.com staysure.zendesk.com; font-src 'self' data: use.typekit.net cdnjs.cloudflare.com *.magnolia-platform.io *.hotjar.com snippet.maze.co *.staysure.co.uk; connect-src 'self' *.staysure.co.uk *.staysuregroup.com *.staysure.magnolia-platform.io *.staysure-prod.magnolia-platform.io *.google-analytics.com *.taboola.com *.googlesyndication.com *.hotjar.com *.hotjar.io static.cloudflareinsights.com cloudflareinsights.com wss://*.hotjar.com googleads.g.doubleclick.net *.infinity-tracking.com ict.infinity-tracking.net bat.bing.com *.google.com *.onetrust.com analytics.tiktok.com analytics.google.com tags.srv.stackadapt.com webanalytics.interserv.co.uk wss://widget-mediator.zopim.com logx.optimizely.com ekr.zdassets.com staysure.zendesk.com *.mention-me.com errors.client.optimizely.com *.analytics.google.com stats.g.doubleclick.net www.google-analytics.com www.tag4arm.com *.contentsquare.com *.contentsquare.net www.facebook.com staysuregroup.germany-2.evergage.com wss://api.smooch.io hoverfly-api-mock.staysuregroup.com:8500 rum.optimizely.com berrythompson.innocraft.cloud *.maze.co browser-intake-datadoghq.eu cdn-assets-prod.s3.amazonaws.com https://bat.bing.net *.doubleclick.net staysure.boost.ai staysure1721655756.zendesk.com api.eu-1.smooch.io staysure.zendesk.com; object-src 'none'; frame-src 'self' ebt-digitised.test.pcl.co.uk *.doubleclick.net mention-me.com *.optimizely.com csxd.staysure.co.uk https://www.googletagmanager.com/ dev.oathstudio.com staysure1721655756.zendesk.com staysure.zendesk.com; form-action 'self' ebt-digitised.test.pcl.co.uk; frame-ancestors 'self' webanalytics.interserv.co.uk staysuregroup.germany-2.evergage.com *.staysure.co.uk *.magnolia-platform.io *.staysuregroup.com; worker-src 'self' blob:; upgrade-insecure-requests ;

cfL4;desc="?proto=TCP&rtt=0&min_rtt=0&rtt_var=0&sent=0&recv=0&lost=0&retrans=0&sent_bytes=0&recv_bytes=0&delivery_rate=0&cwnd=0&unsent_bytes=0&cid=5e0e4287fde25c9e&ts=11441&x=0"

1

/[[...pathname]]

Next.js