Security Analysis Results

DPR, Viewport-Width, Width

h3=":443"; ma=86400

public, max-age=60, stale-while-revalidate=86400

DYNAMIC

9604edc80c00890f-MRS

28b6f2e53f0000388f41599400000001

br

default-src 'self'; script-src 'self' 'unsafe-inline' https://*.contra.com https://contra.com https://*.ads.linkedin.com https://snap.licdn.com https://connect.facebook.net https://www.facebook.com https://www.tiktok.com/embed.js https://www.instagram.com/embed.js https://www.youtube.com https://*.tiktokcdn-us.com https://gist.github.com https://platform.twitter.com https://challenges.cloudflare.com https://accounts.google.com https://apis.google.com https://googletagmanager.com https://www.googletagmanager.com https://*.doubleclick.net https://*.posthog.com https://app.intercom.io https://js.intercomcdn.com https://widget.intercom.io https://*.stripe.com https://*.airwallex.com https://static.hsappstatic.net/MeetingsEmbed/ex/MeetingsEmbedCode.js https://js.hscta.net https://*.hubspot.com https://*.hsleadflows.net https://*.hsforms.net https://*.hsforms.com; style-src 'self' 'unsafe-inline' https://builds.contra.com https://github.githubassets.com; img-src 'self' data: blob: https://*.contra.com https://*.ads.linkedin.com https://*.linkedin.com https://www.facebook.com https://storage.googleapis.com https://cdn.loom.com https://*.googleusercontent.com https://www.googletagmanager.com https://www.google.com https://*.intercom-attachments-1.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com https://*.intercom-attachments.eu https://*.intercom.io https://*.intercomassets.com https://*.intercomassets.eu https://*.intercomcdn.com https://*.intercomcdn.eu https://*.intercomusercontent.com https://*.stripe.com https://*.stream-io-cdn.com https://no-cache.hubspot.com https://*.hubspot.com https://*.hsforms.net https://*.hsforms.com; font-src 'self' data: https://builds.contra.com https://fonts.gstatic.com https://*.intercomcdn.com; connect-src 'self' https://*.contra.com https://contra.api-fast.cloudinary.com https://*.ads.linkedin.com https://connect.facebook.net https://www.facebook.com blob: https://www.loom.com https://prod.spline.design https://storage.googleapis.com https://*.ingest.sentry.io https://*.google-analytics.com https://www.google.com https://*.posthog.com https://*.intercom.io https://*.intercomcdn.com https://*.intercomcdn.eu https://*.intercomusercontent.com wss://*.intercom.io https://*.stripe.com https://chat.stream-io-api.com wss://chat.stream-io-api.com https://*.airwallex.com https://*.hubspot.com https://*.hubapi.com; frame-src 'self' https://www.facebook.com/ https://instagram.com https://m.youtube.com https://platform.twitter.com https://player.vimeo.com https://rive.app https://www.instagram.com https://www.tiktok.com https://www.youtube.com https://www.loom.com https://www.behance.net https://www.canva.com https://codepen.io https://codesandbox.io https://share.descript.com https://www.figma.com https://embed.figma.com https://gist.github.com https://www.linkedin.com https://assets.pinterest.com https://replit.com https://w.soundcloud.com https://my.spline.design https://prod.spline.design https://open.spotify.com https://stackblitz.com https://docs.google.com https://inquiry.withpersona.com https://storage.googleapis.com https://challenges.cloudflare.com https://content.googleapis.com https://accounts.google.com https://content-people.googleapis.com https://www.googletagmanager.com https://*.doubleclick.net https://intercom-sheets.com https://*.stripe.com https://*.airwallex.com https://*.hubspot.com https://*.hs-sites.com https://*.hsforms.net https://*.hsforms.com; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; media-src 'self' data: blob: https://media.contra.com https://builds.contra.com https://*.intercomcdn.com https://*.intercomcdn.eu https://*.stream-io-cdn.com; report-uri https://ab0fa962560b8a221d01a732dd085371.report-uri.com/r/d/csp/reportOnly

text/html;charset=utf-8

Wed, 16 Jul 2025 22:27:46 GMT

<https://builds.contra.com/cd91725e/assets/static/src_generated_styled-system_styles-7a65ba32.qId-BuhL.css>; rel=preload; as=style, <https://builds.contra.com/cd91725e/assets/static/style-04249a7d.MjhM4JJt.css>; rel=preload; as=style, <https://builds.contra.com/cd91725e/chunk-entries/entry-client-routing.Qzu0nz3K.js>; rel="preload"; as="script"; crossorigin="anonymous", <https://builds.contra.com/cd91725e/chunk-entries/entry-client-routing.Qzu0nz3K.js>; rel=modulepreload; as=script, <https://builds.contra.com/cd91725e/chunk-entries/src/pages/index.CIf9oHXN.js>; rel="preload"; as="script"; crossorigin="anonymous", <https://builds.contra.com/cd91725e/chunk-entries/src/pages/index.CIf9oHXN.js>; rel=modulepreload; as=script, <https://builds.contra.com/cd91725e/chunk-entries/src/pages/dashboard.Bauaq6Iq.js>; rel="preload"; as="script"; crossorigin="anonymous", <https://builds.contra.com/cd91725e/chunk-entries/src/pages/dashboard.Bauaq6Iq.js>; rel=modulepreload; as=script, <https://builds.contra.com/cd91725e/chunk-is-plan-event-enabled.DsFSaLTi.js>; rel="preload"; as="script"; crossorigin="anonymous", <https://builds.contra.com/cd91725e/chunk-is-plan-event-enabled.DsFSaLTi.js>; rel=modulepreload; as=script

camera=(self "https://*.withpersona.com/"), display-capture=("https://us.i.posthog.com/"), fullscreen=(self "https://*.figma.com"), geolocation=(), microphone=(), publickey-credentials-get=(), screen-wake-lock=(), web-share=()

strict-origin-when-cross-origin

cloudflare

cfReqDur;dur=3759.55

"/cdn-cgi/speculation"

max-age=31536000; includeSubDomains; preload

Accept-Encoding

1.1 google

nosniff

cd91725e