Security Analysis Results

2959

h3=":443"; ma=86400

public, must-revalidate, proxy-revalidate, max-age=0, s-maxage=1209600

keep-alive

br

en-US

default-src 'self' https://forms-cdn.clickup-stg.com; script-src 'self' blob: 'wasm-unsafe-eval' https://apis.google.com https://accounts.google.com https://js.live.net https://app.box.com https://www.dropbox.com https://maps.googleapis.com https://cdn1.codox.io https://cdn1.stage.codox.io https://cdn2.stage.codox.io https://cdn.firstpromoter.com https://calendly.com https://miro.com https://platform.harvestapp.com https://*.wistia.com https://*.wistia.net https://src.litix.io https://*.daily.co https://api.daily.co https://zapier.com https://cdn.zapier.com https://ct.capterra.com https://*.clarity.ms https://www.googletagmanager.com https://www.googleadservices.com https://www.google-analytics.com https://ssl.google-analytics.com https://hat.thepointyspritesclub.com https://www.redditstatic.com https://googleads.g.doubleclick.net https://core.thepointyspritesclub.com https://m.servedby-buysellads.com https://c.amazon-adsystem.com https://canny.io https://sdk.canny.io https://snap.licdn.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/recaptcha/releases/ https://recaptcha.net/recaptcha/ https://*.sdk.awswaf.com https://*.token.awswaf.com https://connect.facebook.net https://x.clearbitjs.com https://s.pinimg.com https://sdk.minervaknows.com https://sdk-services.minervaknows.com https://pendo-io-static.storage.googleapis.com https://cdn.pendo.io https://pendo-static-5086206243897344.storage.googleapis.com https://data.pendo.io https://app.pendo.io https://content.webproduct.clickup.com https://data.webproduct.clickup.com 'sha256-4F3AlVDfHOAh+oYhZPs3EVMNLNadjO8On0Dw7KGh/0k=' 'sha256-HlaGGq5nhTgcEEAWmEiWF8Bdf6qDczq6wsXFnlEg7Tg=' https://fast.chameleon.io 'sha256-NztFZBIwTwKXUaLLqfhebVwi8A5ATSAjms62gQRI/yQ=' 'sha256-ZAv/hG6n0JedKoJr6z2AHTmkY7cKU/vhYWp5h3dVIsk=' https://cdn.pdst.fm https://d34r8q7sht0t9k.cloudfront.net/tag.js 'sha256-j2ps3etSlArdF3rx5RB3P1LHnZ5QaPvxPl1kLybUU1I=' todesktop-internal: https://code.highcharts.com https://embedding.workato.com https://static.zdassets.com https://*.zdassets.com https://*.zendesk.com https://*.smooch.io https://*.twilio.com https://*.tailwindcss.com https://unpkg.com/html2canvas https://unpkg.com/zone.js@0.14.4/bundles/zone.umd.min.js https://*.apis.google.com 'unsafe-hashes' 'sha256-rRMdkshZyJlCmDX27XnL7g3zXaxv7ei6Sg+yt4R3svU=' 'sha256-46mc3H6z56gnOReRHr//8M7FxjqtSaDN7KetqqduuiE=' 'sha256-lo7ZdP6kFds+wf1WMWvn7MhcFVFJV44kAXODRevzRZ8=' 'sha256-kjwZ9XFHUXkRgP39E+c2Nq0vJmP8LXFE0uBk6CONyps=' 'sha256-lYEr2zHO9mOSeyRaGwAV3ONrKh8W0bkmiI1dNP3XPw8=' 'sha256-LMJv8ESlfiCF+9pWKUez+VXyvZdYrT+fcQ3Eps4XPyQ=' 'sha256-O9aq+7SwZvvc0fhedjnYucjU23ErSZyDH2NlMpTcIrg=' 'sha256-crv0swrwxjIlHW1jNIPi6B6rE2DSmtsXQFN5PQKnM28=' 'sha256-18PfGZ5/htE/jRivbwelUdaz5nHCggm6Z4DwoAxuuuQ=' 'sha256-ZdDTEfl8xrGn7iZ/2mMDizDIe6JRmep2vz9STHJi4Zs=' 'sha256-XmUonDD4SHX/8KL3j/86z0J1usvsHZ1xoxcYIkK9ofY=' 'sha256-TMQYQm5DIUPhkboCV7JZ+UNcKeh2iHk2kDZ+GzVnZyM=' 'sha256-rv9RoPCujGN0BWUcqLIueZC4J98NAoFBaa2VQHSBLUA=' 'sha256-MhQnurjVkR0d3jTJlT4vDS8W1Ul2ufyOI9GbZmyONCc=' 'sha256-fkL1dWflM/Pp1A6PqNJzVUuQZHXkpviRNjFFgUWDc0o=' 'sha256-JrwHtCkAMCxphN8OUZ/8B2IOHBF0GxYQVm/u8lnHk5U=' 'sha256-aPtbM89KJ2QtT9b3cTayhhL6B9UAtlXVAIrISmkAqlo=' 'sha256-dplqP925cq1wFUU0QEM3ErDaKHbkInjAYRqinz3ckA4=' 'sha256-+WyYVdw/xyJMSon2S4rJiuvQwzfxnaOVyO9fBWnBdfI=' 'sha256-d53GrCUkhYjY5Gg+lvPu4EvwVHF469YN3xDuBKJ1zlw=' 'sha256-6YVBj8Dp8/hmBCVa1GkZq10MnLp4jxNZ7DlQg/1e9do=' 'sha256-c46qGWZpjsaDTejjs2vXcwKULa5GqfWHy6NpfRj7RLo=' 'sha256-NAVhSZ+FJwaLOVUVF5pNJJHxUVkbWK5v3gCC+rhwqUE=' 'sha256-9/0hd96qoXdEcT1/9WrK3RBCF0b9iAcQILT7kCdqymI=' 'sha256-8NDdvKWDYv66kjW9fgz/ZKScITpkp4dbsM+TA/O04RM=' 'sha256-d9X+lt79bIweOwRmtIJ8+D3H5ccnoQF34RXSUTL6hvY=' 'sha256-tfwk6Z/5gbYQErJTx0xXYv88nf2sOTB9ziGzTRM780I=' 'sha256-r0zKdIaVXL5La22Qv6w3BFOUx0ZioSsqoP8AOEdGty0=' 'sha256-4Hq8ngOaih5AFi/QwY8sfU4scUQ7UWGxcITuIl1h45Y=' 'sha256-G574QxiyzjYg5WRPE1EIV7ybIvR8RSwSodlLw3OSsSo=' 'sha256-62dGtgZECu/Vf7xGnq6kk2x9UEFtACjjvxdPXV22Y1I=' 'sha256-A1G2PMl7phK8KZzsPIbRZuxaapDp859I6mcj40iW1Vo=' 'sha256-J3lp2ucUq+OQgBYI0rDj0IUEuz0buuDTaQjYGjNVQgU=' 'sha256-HsDuP/JOW1/mYiKGwTIYa1MLC/2ccZaJNF8oxxGPr+I=' https://*.singular.com https://*.singular.net https://datadoghq.com https://tpc.googlesyndication.com https://*.walkme.com https://cdn.segment.com https://*.taboola.com https://*.pointmediatracker.com https://*.marketo.net https://pages.clickup.com https://*.facebook.net https://*.tiktok.com https://bat.bing.com https://*.onmaven.app https://songbirdstag.cardinalcommerce.com https://songbird.cardinalcommerce.com https://c.paypal.com https://embed.reddit.com https://platform.twitter.com https://smd.stage.codox.io https://forms-cdn.clickup-stg.com 'sha256-NJW/o9vFPv55AurPZSxANBCV1b3EKRLkxtESNUYR6Rs=' 'sha256-WJrndxJcvkx4f/sV4x8lDrEYPwjMGNcF8+B9MPcdUtY=' 'sha256-S0gf1qDrORxS+z6eq4O5xdNKx5VG5ve5aEmzY4jh8bA=' 'sha256-vPlwTBgQc6fodCIyRG16+wjJetCOcSPUt01aY2M1ma0=' 'sha256-nKxxQak1SS5upXN0S0CTEBq29TRC2Wf7ynDxyiD43K0=' 'sha256-7vpYS35shGYBg49pVdBj8ilKDVzjXIuYiNV1HbLypbE=' 'sha256-WlqUHgdjtSqK5dxQl8DQB157hkdc3fEbXJCgS0ij+qE=' 'sha256-mRv/LitndzP2OWLvsF760W4iTJqBUAXfbTjUEu1Vngw=' 'sha256-czaIZF4jMPf/u4r4AeHsoS6eL5dA0W5dja5oTn3u/ho=' 'sha256-mgicosfNEhOSNikN5cWjH7mwhN69UbryLTPbqOphfnk=' 'sha256-R9U7R27aNdLIGmMxxg96BGO4wCJjF9AqP1io/uw5NJ0=' 'sha256-tUFTHjIBycnLS+vVyKlYlkLbdxiFc8bauNuopxbIVGM=' 'sha256-Dlv90tMwtY8af1KslIn2GIKiAIISrxGbR8ylSNtwQrc=' 'sha256-dr7xXsx9LDmy4fkRA99yLgCh+m7eFPsQNdnLa4cdxqI=' 'sha256-cV4DEryz9UmXMA1l96oXhBGYLoUUip8ERT6kO2wOTW8=' 'sha256-UQwFHJDhifimD/MI2pxmrjShKO6GfYdrIywZPrjQoYQ=' 'sha256-vhqH8MtpKwrJN06Cz7SYTsqC6WFRmEYG/CVPGJqaCs4=' 'sha256-r1b8sxPautt5yCfJtNd3W2+JiVh0pOOjeJP6fBVm8z8='; style-src 'self' 'unsafe-inline' https://cdn1.codox.io https://cdn.zapier.com https://accounts.google.com https://app.pendo.io https://cdn.pendo.io https://pendo-static-5086206243897344.storage.googleapis.com https://content.webproduct.clickup.com blob: https://fast.wistia.com https://fonts.googleapis.com https://*.walkme.com https://pages.clickup.com https://forms-cdn.clickup-stg.com; img-src 'self' data: https: http: https://www.google.com https://unpkg.com https://q.quora.com https://alb.reddit.com https://www.google-analytics.com https://www.google.co.uk https://www.googletagmanager.com https://core.thepointyspritesclub.com https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net https://*.clarity.ms https://insight.adsrvr.org blob: https://www.facebook.com https://zapier-images.imgix.net https://zapier.com https://cdn.pendo.io https://app.pendo.io https://pendo-static-5086206243897344.storage.googleapis.com https://data.pendo.io https://data.webproduct.clickup.com https://content.webproduct.clickup.com https://tracking.g2crowd.com https://*.giphy.com https://maps.gstatic.com https://maps.googleapis.com https://*.googleapis.com https://*.ggpht.com https://*.githubusercontent.com https://secure.gravatar.com https://www.linkedin.com https://*.walkme.com https://s3.walkmeusercontent.com https://d3sbxpiag177w8.cloudfront.net https://static.zdassets.com https://*.zendesk.com https://media.smooch.io https://*.zdusercontent.com https://dev-attachments.clickup-devs.com https://dev-attachments-public.clickup-devs.com https://*.s.clickup-attachments.com https://*.ls-attachments.clickup-devs.com https://*.ss.clickup-attachments.com https://*.s.clickup-attachments-stg.com https://*.ss.clickup-attachments-stg.com https://id.app.clickup-stg.com https://app-cdn.clickup.com https://forms-cdn.clickup-stg.com; font-src 'self' data: https://*.wistia.com https://fonts.gstatic.com https://fonts.googleapis.com https://*.walkme.com https://*.apis.google.com https://apis.google.com https://forms-cdn.clickup-stg.com; form-action 'self' https: https://canny.io https://connect.facebook.net; media-src 'self' blob: data: https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net https://static.zdassets.com https://*.p.clickup-attachments-qa.com https://*.ps.clickup-attachments-qa.com https://id.app.clickup-qa.com https://*.l-attachments.clickup-devs.com https://dev-attachments.clickup-devs.com https://dev-attachments-public.clickup-devs.com https://*.s.clickup-attachments.com https://*.ls-attachments.clickup-devs.com https://*.ss.clickup-attachments.com https://*.s.clickup-attachments-stg.com https://*.ss.clickup-attachments-stg.com https://id.app.clickup-stg.com https://attachments.clickup.com https://attachments2.clickup.com https://*.p.clickup-attachments.com https://*.ps.clickup-attachments.com https://id.app.clickup.com https://qa.clickup-stg.com https://forms-cdn.clickup-stg.com; connect-src 'self' https://api.exchangeratesapi.io https://maps.googleapis.com https://*.clarity.ms https://*.daily.co wss://*.daily.co https://*.pluot.blue https://sdk.split.io https://events.split.io https://auth.split.io https://streaming.split.io wss://proxy.clickup.codox.io wss://sm-dsm.stage.codox.io https://alb.clickup.codox.io https://sentry.io https://browser-http-intake.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://payments.sandbox.braintree-api.com https://origin-analytics-sand.sandbox.braintree-api.com https://*.braintree-api.com https://*.cardinalcommerce.com https://api.allorigins.win https://www.google-analytics.com https://core.thepointyspritesclub.com https://stats.g.doubleclick.net https://canny.io https://www.facebook.com https://sdk.minervaknows.com https://api.minervaknows.com https://api.zapier.com https://zapier.com https://x.clearbit.com https://*.zendesk.com https://*.smooch.io https://*.ingest.sentry.io https://*.twilio.com wss://*.zendesk.com wss://api.smooch.io wss://voice-js.roaming.twilio.com https://app.pendo.io https://data.pendo.io https://pendo-static-5086206243897344.storage.googleapis.com https://us-central1-adaptive-growth.cloudfunctions.net https://api.giphy.com https://*.litix.io https://*.wistia.com https://embedwistia-a.akamaihd.net https://*.walkme.com https://*.workato.com wss://search.clickup-qa.com wss://frontdoor-search.clickup-qa.com wss://search.clickup-staging.com wss://frontdoor-search.clickup-staging.com wss://search.clickup-prod.com wss://frontdoor-search.clickup-prod.com wss://search.clickup-eu.com wss://frontdoor-search.clickup-eu.com wss://search.clickup-au.com wss://frontdoor-search.clickup-au.com wss://search.clickup-sg.com wss://frontdoor-search.clickup-sg.com https://*.pointmediatracker.com https://*.marketo.net https://*.facebook.net https://*.tiktok.com http://localhost:23435 http://localhost:39214 http://127.0.0.1:23435 http://127.0.0.1:39214 https://dev-attachments.clickup-devs.com https://dev-attachments-public.clickup-devs.com https://*.s.clickup-attachments.com https://*.ls-attachments.clickup-devs.com https://*.ss.clickup-attachments.com https://*.s.clickup-attachments-stg.com https://*.ss.clickup-attachments-stg.com https://id.app.clickup-stg.com https://smd.stage.codox.io wss://proxy.stage.codox.io http://localhost:9000 http://localhost:9004 ws://localhost:9004 http://localhost:3346 http://localhost:3340 ws://localhost:3340 http://localhost:4040 http://localhost:4242 http://localhost:4566 http://localstack-infra:4566 https://staging.clickup.com wss://staging-us-west-2-1.clickup-stg.com wss://ws.clickup-stg.com wss://*.clickup-staging.com wss://*.clickup-stg.com wss://cu-staging-or-coeditor.clickup-staging.com wss://na001-ws.clickup-staging.com wss://eu001-ws.clickup-staging.com wss://ap001-ws.clickup-staging.com wss://sa001-ws.clickup-staging.com https://devintervalapp.clickup.com https://gantt-export-staging.clickup.com wss://staging.clickup.com https://staging-landing.clickup.com blob: https://apis.google.com https://accounts.google.com https://js.live.net https://app.box.com https://www.dropbox.com https://cdn1.codox.io https://cdn1.stage.codox.io https://cdn2.stage.codox.io https://cdn.firstpromoter.com https://calendly.com https://miro.com https://platform.harvestapp.com https://*.wistia.net https://src.litix.io https://api.daily.co https://cdn.zapier.com https://ct.capterra.com https://www.googletagmanager.com https://www.googleadservices.com https://ssl.google-analytics.com https://hat.thepointyspritesclub.com https://www.redditstatic.com https://googleads.g.doubleclick.net https://m.servedby-buysellads.com https://c.amazon-adsystem.com https://sdk.canny.io https://snap.licdn.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/recaptcha/releases/ https://recaptcha.net/recaptcha/ https://*.sdk.awswaf.com https://*.token.awswaf.com https://connect.facebook.net https://x.clearbitjs.com https://s.pinimg.com https://sdk-services.minervaknows.com https://pendo-io-static.storage.googleapis.com https://cdn.pendo.io https://content.webproduct.clickup.com https://data.webproduct.clickup.com https://fast.chameleon.io https://cdn.pdst.fm https://d34r8q7sht0t9k.cloudfront.net/tag.js todesktop-internal: https://code.highcharts.com https://embedding.workato.com https://static.zdassets.com https://*.zdassets.com https://*.tailwindcss.com https://unpkg.com/html2canvas https://unpkg.com/zone.js@0.14.4/bundles/zone.umd.min.js https://*.apis.google.com https://*.singular.com https://*.singular.net https://datadoghq.com https://tpc.googlesyndication.com https://cdn.segment.com https://*.taboola.com https://pages.clickup.com https://bat.bing.com https://*.onmaven.app https://songbirdstag.cardinalcommerce.com https://songbird.cardinalcommerce.com https://c.paypal.com https://embed.reddit.com https://platform.twitter.com https://forms-cdn.clickup-stg.com https://fast.wistia.com https://fonts.googleapis.com https: https://www.google.com https://unpkg.com https://q.quora.com https://alb.reddit.com https://www.google.co.uk https://insight.adsrvr.org https://zapier-images.imgix.net https://tracking.g2crowd.com https://*.giphy.com https://maps.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.githubusercontent.com https://secure.gravatar.com https://www.linkedin.com https://s3.walkmeusercontent.com https://d3sbxpiag177w8.cloudfront.net https://media.smooch.io https://*.zdusercontent.com https://app-cdn.clickup.com https://fonts.gstatic.com https://*.p.clickup-attachments-qa.com https://*.ps.clickup-attachments-qa.com https://id.app.clickup-qa.com https://*.l-attachments.clickup-devs.com https://attachments.clickup.com https://attachments2.clickup.com https://*.p.clickup-attachments.com https://*.ps.clickup-attachments.com https://id.app.clickup.com https://qa.clickup-stg.com; child-src 'self' blob: https://www.youtube.com https://player.vimeo.com https://fast.wistia.net https://www.facebook.com https://staticxx.facebook.com https://sdk-services.minervaknows.com https://*.walkme.com; frame-src https:; manifest-src 'self' https://forms-cdn.clickup-stg.com; object-src 'none';

text/html; charset=utf-8

Mon, 20 Apr 2026 19:37:45 GMT

W/"2409ff704a8a31e2ea6fd881ee5e393d"

Mon, 20 Apr 2026 19:37:17 GMT

AmazonS3

cdn-cache-hit,cdn-pop;desc="SEA900-P6",cdn-rid;desc="H7I6OIvuYtjt4_YSHMF27qMk6FAKb1vg_73tfpSkUViYGW3iRehpJw==",cdn-hit-layer;desc="EDGE",cdn-downstream-fbl;dur=74

max-age=31536000; includeSubDomains

chunked

Accept-Encoding Origin

1.1 7c27be690f744b82cc85ad704d739b5a.cloudfront.net (CloudFront)

H7I6OIvuYtjt4_YSHMF27qMk6FAKb1vg_73tfpSkUViYGW3iRehpJw==

SEA900-P6

AES256

null

Hit from cloudfront

nosniff

off

noopen

none

0