Link Check results for app.squareup.com

cache-control: private, no-cache, no-store, max-age=0, must-revalidate

cf-cache-status: DYNAMIC

cf-ray: 93bc91474f84384b-MAD

content-encoding: gzip

content-language: en

content-security-policy: default-src 'self' alchemy.veriff.com *.veriff.me api.neuro-id.com cdn.cookielaw.org d1g145x70srn7h.cloudfront.net google.com gstatic.com logs.neuro-id.com munchkin.marketo.net *.datadoghq-browser-agent.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com squareupstaging.com squareup.com withpersona.com 424-iab-218.mktoresp.com js.driftt.com *.squarestagingexternal.com *.cloudfront.net *.cloudfunctions.net *.cloudflareinsights.com *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.optimizely.com *.sentry.io *.squarecdn.com *.squarecloudservices.com *.squareupstaging.com *.squareup.com *.chilipiper.com *.onetrust.com *.launchdarkly.com https://test-drive-4-s6uit34pua-wl.a.run.app/ 3dsecure.sumup.com *.3dsecure-cardprocess.de *.abanca.com *.abnamro.nl *.acssecure.com *.activa-card.com *.americanexpress.com *.arca.am *.arcot.com *.axisbank.com *.bankcomm.com *.bankofamerica.com *.barclaycard.co.uk *.barclays.co.uk *.bccard.com *.bnpparibas.com *.bpce.fr *.btrl.ro *.capitalone.com *.cardcomplete.com *.cardinalcommerce.com *.cic.fr *.citibank.com *.cm-cic.com *.comdirect.de *.creditmutuel.fr *.curopayments.net *.deutsche-bank.de *.easybank.at *.enstage-sas.com *.erstebank.hu *.hyundaicard.com *.icicibank.com *.icscards.nl *.lcl.fr *.lloydstsb.com *.marqeta.com *.mashreq.com *.maybank.com *.modirum.com *.monext.fr *.monzo.com *.multisafepay.com *.mycardsecure.com *.n26.com *.ogone.com *.otpbank.hu *.pay.nl *.permatabank.com *.pluscard.de *.rabobank.nl *.redsys.es *.regiobank.nl *.revolut.com *.raiffeisenbank.rs *.rsa3dsauth.com *.secureacs.com *.securesuite.co.uk *.securesuite.net *.securitybank.com *.sia.eu *.sparkasse.at *.sparkassen-kreditkarten.de *.swisscard.ch *.touchtechpayments.com *.vinea.es *.visa.com *.viseca.ch *.westpac.com.au *.wirecard.com *.wlp-acs.com *.xecure3d.com *.sprig.com *.online-metrix.net utt.impactcdn.com fast.ssqt.io *.contentsquare.net *.contentsquare.com r.moshimo.com s.yimg.jp statics.a8.net static.criteo.net *.ctfassets.net *.pinterest.com *.pinimg.com *.quantserve.com; script-src 'self' 'unsafe-eval' 'unsafe-hashes' alchemy.veriff.com *.veriff.me api.neuro-id.com cdn.cookielaw.org d1g145x70srn7h.cloudfront.net google.com gstatic.com logs.neuro-id.com munchkin.marketo.net *.datadoghq-browser-agent.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com squareupstaging.com squareup.com withpersona.com 424-iab-218.mktoresp.com js.driftt.com *.squarestagingexternal.com *.cloudfront.net *.cloudfunctions.net *.cloudflareinsights.com *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.optimizely.com *.sentry.io *.squarecdn.com *.squarecloudservices.com *.squareupstaging.com *.squareup.com *.chilipiper.com *.onetrust.com *.launchdarkly.com https://test-drive-4-s6uit34pua-wl.a.run.app/ 3dsecure.sumup.com *.3dsecure-cardprocess.de *.abanca.com *.abnamro.nl *.acssecure.com *.activa-card.com *.americanexpress.com *.arca.am *.arcot.com *.axisbank.com *.bankcomm.com *.bankofamerica.com *.barclaycard.co.uk *.barclays.co.uk *.bccard.com *.bnpparibas.com *.bpce.fr *.btrl.ro *.capitalone.com *.cardcomplete.com *.cardinalcommerce.com *.cic.fr *.citibank.com *.cm-cic.com *.comdirect.de *.creditmutuel.fr *.curopayments.net *.deutsche-bank.de *.easybank.at *.enstage-sas.com *.erstebank.hu *.hyundaicard.com *.icicibank.com *.icscards.nl *.lcl.fr *.lloydstsb.com *.marqeta.com *.mashreq.com *.maybank.com *.modirum.com *.monext.fr *.monzo.com *.multisafepay.com *.mycardsecure.com *.n26.com *.ogone.com *.otpbank.hu *.pay.nl *.permatabank.com *.pluscard.de *.rabobank.nl *.redsys.es *.regiobank.nl *.revolut.com *.raiffeisenbank.rs *.rsa3dsauth.com *.secureacs.com *.securesuite.co.uk *.securesuite.net *.securitybank.com *.sia.eu *.sparkasse.at *.sparkassen-kreditkarten.de *.swisscard.ch *.touchtechpayments.com *.vinea.es *.visa.com *.viseca.ch *.westpac.com.au *.wirecard.com *.wlp-acs.com *.xecure3d.com *.sprig.com *.online-metrix.net utt.impactcdn.com fast.ssqt.io *.contentsquare.net *.contentsquare.com r.moshimo.com s.yimg.jp statics.a8.net static.criteo.net *.ctfassets.net *.pinterest.com *.pinimg.com *.quantserve.com 'sha256-3nsz5R57mJoSwk59FvRiY+CKKYzjptRmXvN1nysIB5I=' 'sha256-KI8mKaamAnCVlqIR6WE81wUE6conZY2cAMnUysM7/5Y=' 'sha256-f/QsiUu8x+NST1iO718j6RCW0iDnfSgL55JpiJJRqHg=' 'sha256-Er1GP0GT1RhwfHhy+MqIMbbGqImZqcdXoFSxFDduh6s=' 'sha256-SY4xLTybNCy8M35gQZOPV2tRvdsJlkcyhIUNkSZl2sI=' 'sha256-T/jbBj4i4uewwdWI1GN1oL/jkzv+jRXTWuv2VDwbru8=' 'sha256-bkqIbbxWXOGiKzfEFCYAIIkNh9uXkLG83h1s2+dtYpY=' 'sha256-J6krQdeePG2QVRW+kYKF7sc4QGv6dy9YssKVFKVTqfM=' 'sha256-dVbLoBdFkmklHxl22DsrkW1AuM4JLlt03g3yqH97tJQ=' 'sha256-8XUiT4MSl7qmnMJOiAUXP3m0H7wNMhMfeoP3oqZ6jfA=' 'sha256-VPN22qi7Oynl8TQvEdwSCnoJvfPD/L4DpCm7F/gGRwA=' 'nonce-a3a573a8-e5bd-468a-97e2-6756d8d9ce2a'; img-src 'self' data: *; connect-src 'self' alchemy.veriff.com *.veriff.me api.neuro-id.com cdn.cookielaw.org d1g145x70srn7h.cloudfront.net google.com gstatic.com logs.neuro-id.com munchkin.marketo.net *.datadoghq-browser-agent.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com squareupstaging.com squareup.com withpersona.com 424-iab-218.mktoresp.com js.driftt.com *.squarestagingexternal.com *.cloudfront.net *.cloudfunctions.net *.cloudflareinsights.com *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.optimizely.com *.sentry.io *.squarecdn.com *.squarecloudservices.com *.squareupstaging.com *.squareup.com *.chilipiper.com *.onetrust.com *.launchdarkly.com https://test-drive-4-s6uit34pua-wl.a.run.app/ 3dsecure.sumup.com *.3dsecure-cardprocess.de *.abanca.com *.abnamro.nl *.acssecure.com *.activa-card.com *.americanexpress.com *.arca.am *.arcot.com *.axisbank.com *.bankcomm.com *.bankofamerica.com *.barclaycard.co.uk *.barclays.co.uk *.bccard.com *.bnpparibas.com *.bpce.fr *.btrl.ro *.capitalone.com *.cardcomplete.com *.cardinalcommerce.com *.cic.fr *.citibank.com *.cm-cic.com *.comdirect.de *.creditmutuel.fr *.curopayments.net *.deutsche-bank.de *.easybank.at *.enstage-sas.com *.erstebank.hu *.hyundaicard.com *.icicibank.com *.icscards.nl *.lcl.fr *.lloydstsb.com *.marqeta.com *.mashreq.com *.maybank.com *.modirum.com *.monext.fr *.monzo.com *.multisafepay.com *.mycardsecure.com *.n26.com *.ogone.com *.otpbank.hu *.pay.nl *.permatabank.com *.pluscard.de *.rabobank.nl *.redsys.es *.regiobank.nl *.revolut.com *.raiffeisenbank.rs *.rsa3dsauth.com *.secureacs.com *.securesuite.co.uk *.securesuite.net *.securitybank.com *.sia.eu *.sparkasse.at *.sparkassen-kreditkarten.de *.swisscard.ch *.touchtechpayments.com *.vinea.es *.visa.com *.viseca.ch *.westpac.com.au *.wirecard.com *.wlp-acs.com *.xecure3d.com *.sprig.com *.online-metrix.net utt.impactcdn.com fast.ssqt.io *.contentsquare.net *.contentsquare.com r.moshimo.com s.yimg.jp statics.a8.net static.criteo.net *.ctfassets.net *.pinterest.com *.pinimg.com *.quantserve.com; style-src 'self' 'unsafe-inline' alchemy.veriff.com *.veriff.me api.neuro-id.com cdn.cookielaw.org d1g145x70srn7h.cloudfront.net google.com gstatic.com logs.neuro-id.com munchkin.marketo.net *.datadoghq-browser-agent.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com squareupstaging.com squareup.com withpersona.com 424-iab-218.mktoresp.com js.driftt.com *.squarestagingexternal.com *.cloudfront.net *.cloudfunctions.net *.cloudflareinsights.com *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.optimizely.com *.sentry.io *.squarecdn.com *.squarecloudservices.com *.squareupstaging.com *.squareup.com *.chilipiper.com *.onetrust.com *.launchdarkly.com https://test-drive-4-s6uit34pua-wl.a.run.app/ 3dsecure.sumup.com *.3dsecure-cardprocess.de *.abanca.com *.abnamro.nl *.acssecure.com *.activa-card.com *.americanexpress.com *.arca.am *.arcot.com *.axisbank.com *.bankcomm.com *.bankofamerica.com *.barclaycard.co.uk *.barclays.co.uk *.bccard.com *.bnpparibas.com *.bpce.fr *.btrl.ro *.capitalone.com *.cardcomplete.com *.cardinalcommerce.com *.cic.fr *.citibank.com *.cm-cic.com *.comdirect.de *.creditmutuel.fr *.curopayments.net *.deutsche-bank.de *.easybank.at *.enstage-sas.com *.erstebank.hu *.hyundaicard.com *.icicibank.com *.icscards.nl *.lcl.fr *.lloydstsb.com *.marqeta.com *.mashreq.com *.maybank.com *.modirum.com *.monext.fr *.monzo.com *.multisafepay.com *.mycardsecure.com *.n26.com *.ogone.com *.otpbank.hu *.pay.nl *.permatabank.com *.pluscard.de *.rabobank.nl *.redsys.es *.regiobank.nl *.revolut.com *.raiffeisenbank.rs *.rsa3dsauth.com *.secureacs.com *.securesuite.co.uk *.securesuite.net *.securitybank.com *.sia.eu *.sparkasse.at *.sparkassen-kreditkarten.de *.swisscard.ch *.touchtechpayments.com *.vinea.es *.visa.com *.viseca.ch *.westpac.com.au *.wirecard.com *.wlp-acs.com *.xecure3d.com *.sprig.com *.online-metrix.net utt.impactcdn.com fast.ssqt.io *.contentsquare.net *.contentsquare.com r.moshimo.com s.yimg.jp statics.a8.net static.criteo.net *.ctfassets.net *.pinterest.com *.pinimg.com *.quantserve.com; font-src 'self' alchemy.veriff.com *.veriff.me api.neuro-id.com cdn.cookielaw.org d1g145x70srn7h.cloudfront.net google.com gstatic.com logs.neuro-id.com munchkin.marketo.net *.datadoghq-browser-agent.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com squareupstaging.com squareup.com withpersona.com 424-iab-218.mktoresp.com js.driftt.com *.squarestagingexternal.com *.cloudfront.net *.cloudfunctions.net *.cloudflareinsights.com *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.optimizely.com *.sentry.io *.squarecdn.com *.squarecloudservices.com *.squareupstaging.com *.squareup.com *.chilipiper.com *.onetrust.com *.launchdarkly.com https://test-drive-4-s6uit34pua-wl.a.run.app/ 3dsecure.sumup.com *.3dsecure-cardprocess.de *.abanca.com *.abnamro.nl *.acssecure.com *.activa-card.com *.americanexpress.com *.arca.am *.arcot.com *.axisbank.com *.bankcomm.com *.bankofamerica.com *.barclaycard.co.uk *.barclays.co.uk *.bccard.com *.bnpparibas.com *.bpce.fr *.btrl.ro *.capitalone.com *.cardcomplete.com *.cardinalcommerce.com *.cic.fr *.citibank.com *.cm-cic.com *.comdirect.de *.creditmutuel.fr *.curopayments.net *.deutsche-bank.de *.easybank.at *.enstage-sas.com *.erstebank.hu *.hyundaicard.com *.icicibank.com *.icscards.nl *.lcl.fr *.lloydstsb.com *.marqeta.com *.mashreq.com *.maybank.com *.modirum.com *.monext.fr *.monzo.com *.multisafepay.com *.mycardsecure.com *.n26.com *.ogone.com *.otpbank.hu *.pay.nl *.permatabank.com *.pluscard.de *.rabobank.nl *.redsys.es *.regiobank.nl *.revolut.com *.raiffeisenbank.rs *.rsa3dsauth.com *.secureacs.com *.securesuite.co.uk *.securesuite.net *.securitybank.com *.sia.eu *.sparkasse.at *.sparkassen-kreditkarten.de *.swisscard.ch *.touchtechpayments.com *.vinea.es *.visa.com *.viseca.ch *.westpac.com.au *.wirecard.com *.wlp-acs.com *.xecure3d.com *.sprig.com *.online-metrix.net utt.impactcdn.com fast.ssqt.io *.contentsquare.net *.contentsquare.com r.moshimo.com s.yimg.jp statics.a8.net static.criteo.net *.ctfassets.net *.pinterest.com *.pinimg.com *.quantserve.com; manifest-src 'self' alchemy.veriff.com *.veriff.me api.neuro-id.com cdn.cookielaw.org d1g145x70srn7h.cloudfront.net google.com gstatic.com logs.neuro-id.com munchkin.marketo.net *.datadoghq-browser-agent.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com squareupstaging.com squareup.com withpersona.com 424-iab-218.mktoresp.com js.driftt.com *.squarestagingexternal.com *.cloudfront.net *.cloudfunctions.net *.cloudflareinsights.com *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.optimizely.com *.sentry.io *.squarecdn.com *.squarecloudservices.com *.squareupstaging.com *.squareup.com *.chilipiper.com *.onetrust.com *.launchdarkly.com https://test-drive-4-s6uit34pua-wl.a.run.app/ 3dsecure.sumup.com *.3dsecure-cardprocess.de *.abanca.com *.abnamro.nl *.acssecure.com *.activa-card.com *.americanexpress.com *.arca.am *.arcot.com *.axisbank.com *.bankcomm.com *.bankofamerica.com *.barclaycard.co.uk *.barclays.co.uk *.bccard.com *.bnpparibas.com *.bpce.fr *.btrl.ro *.capitalone.com *.cardcomplete.com *.cardinalcommerce.com *.cic.fr *.citibank.com *.cm-cic.com *.comdirect.de *.creditmutuel.fr *.curopayments.net *.deutsche-bank.de *.easybank.at *.enstage-sas.com *.erstebank.hu *.hyundaicard.com *.icicibank.com *.icscards.nl *.lcl.fr *.lloydstsb.com *.marqeta.com *.mashreq.com *.maybank.com *.modirum.com *.monext.fr *.monzo.com *.multisafepay.com *.mycardsecure.com *.n26.com *.ogone.com *.otpbank.hu *.pay.nl *.permatabank.com *.pluscard.de *.rabobank.nl *.redsys.es *.regiobank.nl *.revolut.com *.raiffeisenbank.rs *.rsa3dsauth.com *.secureacs.com *.securesuite.co.uk *.securesuite.net *.securitybank.com *.sia.eu *.sparkasse.at *.sparkassen-kreditkarten.de *.swisscard.ch *.touchtechpayments.com *.vinea.es *.visa.com *.viseca.ch *.westpac.com.au *.wirecard.com *.wlp-acs.com *.xecure3d.com *.sprig.com *.online-metrix.net utt.impactcdn.com fast.ssqt.io *.contentsquare.net *.contentsquare.com r.moshimo.com s.yimg.jp statics.a8.net static.criteo.net *.ctfassets.net *.pinterest.com *.pinimg.com *.quantserve.com; frame-src alchemy.veriff.com *.veriff.me api.neuro-id.com cdn.cookielaw.org d1g145x70srn7h.cloudfront.net google.com gstatic.com logs.neuro-id.com munchkin.marketo.net *.datadoghq-browser-agent.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com squareupstaging.com squareup.com withpersona.com 424-iab-218.mktoresp.com js.driftt.com *.squarestagingexternal.com *.cloudfront.net *.cloudfunctions.net *.cloudflareinsights.com *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.optimizely.com *.sentry.io *.squarecdn.com *.squarecloudservices.com *.squareupstaging.com *.squareup.com *.chilipiper.com *.onetrust.com *.launchdarkly.com https://test-drive-4-s6uit34pua-wl.a.run.app/ 3dsecure.sumup.com *.3dsecure-cardprocess.de *.abanca.com *.abnamro.nl *.acssecure.com *.activa-card.com *.americanexpress.com *.arca.am *.arcot.com *.axisbank.com *.bankcomm.com *.bankofamerica.com *.barclaycard.co.uk *.barclays.co.uk *.bccard.com *.bnpparibas.com *.bpce.fr *.btrl.ro *.capitalone.com *.cardcomplete.com *.cardinalcommerce.com *.cic.fr *.citibank.com *.cm-cic.com *.comdirect.de *.creditmutuel.fr *.curopayments.net *.deutsche-bank.de *.easybank.at *.enstage-sas.com *.erstebank.hu *.hyundaicard.com *.icicibank.com *.icscards.nl *.lcl.fr *.lloydstsb.com *.marqeta.com *.mashreq.com *.maybank.com *.modirum.com *.monext.fr *.monzo.com *.multisafepay.com *.mycardsecure.com *.n26.com *.ogone.com *.otpbank.hu *.pay.nl *.permatabank.com *.pluscard.de *.rabobank.nl *.redsys.es *.regiobank.nl *.revolut.com *.raiffeisenbank.rs *.rsa3dsauth.com *.secureacs.com *.securesuite.co.uk *.securesuite.net *.securitybank.com *.sia.eu *.sparkasse.at *.sparkassen-kreditkarten.de *.swisscard.ch *.touchtechpayments.com *.vinea.es *.visa.com *.viseca.ch *.westpac.com.au *.wirecard.com *.wlp-acs.com *.xecure3d.com *.sprig.com *.online-metrix.net utt.impactcdn.com fast.ssqt.io *.contentsquare.net *.contentsquare.com r.moshimo.com s.yimg.jp statics.a8.net static.criteo.net *.ctfassets.net *.pinterest.com *.pinimg.com *.quantserve.com; worker-src * data: 'unsafe-eval' 'unsafe-inline' blob:; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubb119f8492ddb8bdf4934c5212c4b03d2&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Aonboard-frontend%2Cenv%3Aproduction&service=onboard-frontend;

content-type: text/html; charset=utf-8

cross-origin-opener-policy: same-origin

cross-origin-resource-policy: same-origin

date: Wed, 07 May 2025 00:23:14 GMT

frame-options: DENY

origin-agent-cluster: ?1

referrer-policy: strict-origin-when-cross-origin

server: cloudflare

strict-transport-security: max-age=631152000; includeSubDomains; preload

vary: Accept-Encoding

x-content-type-options: nosniff

x-dns-prefetch-control: off

x-download-options: noopen

x-envoy-decorator-operation: /signup/**

x-frame-options: DENY

x-nonce: a3a573a8-e5bd-468a-97e2-6756d8d9ce2a

x-permitted-cross-domain-policies: none

x-sq-dc: aws

x-sq-istio-migration-ingress-proxy: sq-envoy

x-sq-istio-migration-ingress-region: us-west-2

x-sq-region: us-west-2

x-xss-protection: 1; mode=block