Security Analysis Results

9e0eefe7092d67be-SJC

keep-alive

zstd

text/html; charset=UTF-8

Mon, 23 Mar 2026 16:50:47 GMT

{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}

{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=OcOQLF5%2BsGYRUoslDVyK2PoLuEI2FAeW3V4F8JpuK9wMSdPYZKwF21Xe2bI6nFFA0Cssm3Q8ZMDQyDn45oR3cR8YUsw6%2BUqXCawJtHQ%3D"}]}

cloudflare

cfCacheStatus;desc="DYNAMIC" cfEdge;dur=14,cfOrigin;dur=8

chunked

h3=":443"; ma=86400

DYNAMIC

connect-src 'self' *.hubspot.com *.google.com *.bing.com *.linkedin.com *.licdn.com *.doubleclick.net *.googlesyndication.com api.hubapi.com forms.hsforms.com js.zi-scripts.com js.hs-scripts.com js.hs-analytics.net js.hsadspixel.net js.hubspotfeedback.com js.hs-banner.com js.hsleadflows.net js.usemessages.com lottie.host ws.zoominfo.com www.googletagservices.com www.googletagmanager.com *.google-analytics.com https://bam.eu01.nr-data.net/; default-src 'self'; font-src 'self' data:; frame-src 'self' *.hubspot.com *.google.com *.doubleclick.net *.googlesyndication.com forms.hsforms.com js.usemessages.com js.hscollectedforms.net js.hsadspixel.net sdx.microsoft.com www.linkedin.com www.googletagmanager.com; img-src 'self' data: *.hubspot.com *.hsforms.com *.bing.com *.microsoft.com *.linkedin.com *.licdn.com *.google.com *.doubleclick.net *.googlesyndication.com *.google.com.mx *.google.co.uk *.google.com.br *.google.co.in *.google.de *.google.com.tr *.google.co.il *.google.ca *.google.ro *.google.nl *.google.fr *.google.es *.google.ie *.google.com.pr *.google.it *.google.com.au *.google.com.ec *.google.com.ph *.google.com.sg *.google.com.pk *.google.at *.google.no *.google.cl *.google.co.kr *.google.se *.google.co.jp *.google.com.pe *.google.com.my *.google.co.th *.google.co.za *.google.com.ua *.google.sk *.google.com.ng *.google.pl *.google.be *.google.fi *.google.ae *.google.com.co *.google.co.id *.google.co.ve *.google.com.hk *.google.com.eg *.google.com.uy *.google.com.ar *.google.ch *.google.ru *.google.co.ke *.google.pt *.google.mu *.google.com.sa *.google.com.vn *.google.com.tw *.google.gr *.google.com.bd *.google.dk *.google.com.py *.google.ee *.google.co.nz *.google.co.ma *.google.cz *.google.lk *.google.bg *.google.rs *.google.com.do *.google.hu *.google.iq *.google.co.cr *.google.al *.google.jo *.google.hr *.google.com.pa *.google.com.cy *.google.com.gh *.google.lt *.google.kz *.google.com.np *.google.by *.google.dz *.google.com.sv *.google.hn *.google.com.kw *.google.com.et *.google.mk *.google.ge *.google.cn *.google.com.jm *.google.si *.google.co.ug *.google.lv *.google.md *.google.co.mz *.google.lu *.google.am cdn2.hubspot.net p.adsymptotic.com www.googleadservices.com www.googletagmanager.com; media-src 'self' dai.google.com media.licdn.com; object-src *.googlesyndication.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.nr-data.net https://*.googletagservices.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.google.com https://bat.bing.com https://content.linkedin.com https://forms.hsforms.com https://googleads.g.doubleclick.net https://googletagmanager.com https://js.zi-scripts.com https://js-agent.newrelic.com https://js.hubspot.com https://js.hsforms.net https://js.hscollectedforms.net https://js.hs-analytics.net https://js.usemessages.com https://js.hubspotfeedback.com https://js.hsadspixel.net https://js.hs-banner.com https://js.hsleadflows.net https://js-na1.hs-scripts.com https://js.hs-scripts.com https://platform.linkedin.com https://r.bing.com https://static-exp1.licdn.com https://snap.licdn.com https://tagmanager.google.com https://www.google.com https://www.googletagmanager.com https://www.inspiration-insight.com https://bam.eu01.nr-data.net/; style-src 'self' 'report-sample' 'unsafe-inline' *.google.com *.bing.com *.licdn.com;

HIT

<https://www.bocabio.com/wp-json/>; rel="https://api.w.org/" <https://www.bocabio.com/wp-json/wp/v2/pages/12>; rel="alternate"; title="JSON"; type="application/json" <https://www.bocabio.com/>; rel=shortlink

strict-origin-when-cross-origin strict-origin-when-cross-origin

max-age=31536000 max-age=31536000; includeSubDomains

Accept-Encoding

nosniff nosniff

SAMEORIGIN SAMEORIGIN

1; mode=block 1; mode=block