Security Analysis Results

DYNAMIC

9e0195f68c3f760e-SJC

private, no-cache, no-store, max-age=0, must-revalidate

keep-alive

gzip

text/html; charset=utf-8

Sun, 22 Mar 2026 01:57:30 GMT

</_next/static/media/0484562807a97172-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/8888a3826f4a3af4-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/a1386beebedccca4-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/b957ea75a84b6ea7-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/c3bc380753a8436c-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/eafabf029ad39a43-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/f10b8e9d91f3edcb-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/fe0777f1195381cb-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/ebfdaa37f864716d.css>; rel=preload; as="style", </_next/static/css/1215211487b750a4.css>; rel=preload; as="style", </_next/static/css/35e02a56e5dd759e.css>; rel=preload; as="style", </_next/static/css/9ea9f98954b06900.css>; rel=preload; as="style", </_next/static/css/433ba172f85af898.css>; rel=preload; as="style", </_next/static/css/5a84a894d0710aa0.css>; rel=preload; as="style"

cloudflare

max-age=31536000; includeSubDomains

chunked

rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding

frame-ancestors 'self' https://app.storyblok.com https://www.bureaucracy.es;

default-src 'self' 'unsafe-inline' https://*.bing.com; connect-src 'self' https://*.amazon-adsystem.com https://ara.paa-reporting-advertising.amazon https://*.applovin.com https://bat.bing.com https://bat.bing.net https://a.clarity.ms https://j.clarity.ms https://l.clarity.ms https://n.clarity.ms https://s.clarity.ms https://y.clarity.ms https://www.facebook.com https://*.analytics.google.com https://*.google-analytics.com https://*.google.at https://*.google.cz https://*.google.de https://*.google.it https://*.google.lt https://*.google.com https://*.googleadservices.com https://*.googleapis.com https://*.googletagmanager.com https://google.com https://pagead2.googlesyndication.com https://stats.g.doubleclick.net https://*.nordsec.com https://www.paypal.com https://www.sandbox.paypal.com https://*.mountainkube.com https://*.saily.com https://api.storyblok.com https://analytics-ipv6.tiktokw.us https://analytics.tiktok.com https://ekr.zdassets.com; font-src 'self' data: https://fonts.gstatic.com; frame-ancestors 'self' https://app.storyblok.com https://www.bureaucracy.es; frame-src 'self' https://aax-eu.amazon-adsystem.com https://www.facebook.com https://*.googletagmanager.com https://pay.google.com https://iframe-card.nordpayments.com https://iframe-card.nonpayments.org https://www.paypal.com https://www.sandbox.paypal.com https://*.saily.com; img-src 'self' data: https://impressions.onelink.me https://bat.bing.com https://bat.bing.net https://*.nordcdn.com https://c.clarity.ms https://beacons.extremereach.io https://connect.facebook.net https://www.facebook.com https://*.google.at https://*.google.cz https://*.google.de https://*.google.lt https://*.google.com https://*.googletagmanager.com https://*.gstatic.com https://cm.g.doubleclick.net https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.google.com.br https://www.googleadservices.com https://collector-47701.us.tvsquared.com https://um.simpli.fi; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.appsflyer.com https://*.nordcdn.com https://*.googletagmanager.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://*.amazon-adsystem.com https://*.applovin.com https://s.axon.ai https://*.appsflyer.com https://bat.bing.com https://*.nordcdn.com https://scripts.clarity.ms https://www.clarity.ms https://connect.facebook.net https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://googleads.g.doubleclick.net https://stapecdn.com https://collector-47701.us.tvsquared.com https://*.paypal.com https://i.simpli.fi https://tag.simpli.fi https://um.simpli.fi https://app.storyblok.com https://analytics.tiktok.com https://static.zdassets.com; style-src 'self' 'unsafe-inline' https://*.nordcdn.com https://fonts.googleapis.com; media-src 'self' https://*.nordcdn.com; worker-src 'self' blob: ; report-uri https://debug.nordsec.com/api/18/security/?sentry_key=491984acc208af9ba2e58eec3786a25b; report-to csp-endpoint;

{"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://debug.nordsec.com/api/18/security/?sentry_key=491984acc208af9ba2e58eec3786a25b"}],"include_subdomains":true}

DENY

/creator/?coupon=qrcode&utm_source=6952&utm_medium=affiliate&utm_campaign=104&aff_transaction_id=1023277c1fc577ad20214dc456d5fc&aff_offer_id=104&aff_id=6952

Next.js

https://0.0.0.0:3000/creator/?coupon=qrcode&utm_source=6952&utm_medium=affiliate&utm_campaign=104&aff_transaction_id=1023277c1fc577ad20214dc456d5fc&aff_offer_id=104&aff_id=6952