Security Analysis Results

246

public, max-age=14400, must-revalidate

HIT

96e1cb2a2818583e-MRS

2940fd49cd0001002c9e23f400000001

br

default-src 'self' 'unsafe-inline' fellow.app; connect-src 'self' api.hubapi.com api.hubspot.com api.segment.io cdn.segment.com fellow.app forms.hsforms.com forms.hubspot.com heapanalytics.com https://*.hotjar.com:* https://*.hotjar.io:* wss://*.hotjar.com monitor.clickcease.com stats.g.doubleclick.net www.facebook.com google-analytics.com *.google-analytics.com analytics.google.com *.analytics.google.com bat.bing.com yoast.com my.wpengine.com cdn.linkedin.oribi.io px.ads.linkedin.com forms.hscollectedforms.net *.chilipiper.com *.clarity.ms c.bing.com app.clearbit.com share.cello.so growthbook-proxy.fellow.app *.pocustrack.com events.framer.com framerusercontent.com *.hsforms.net *.hsforms.com *.hubspot.com app.revenuehero.io api.framer.com api.rudderstack.com *.dataplane.rudderstack.com pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com www.google.com google.com data.debugbear.com *.beehiiv.net *.intercom.io *.intercomcdn.com *.intercomusercontent.com pro.ip-api.com wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io wss://nexus-europe-websocket.intercom.io wss://nexus-australia-websocket.intercom.io app.ablecdp.com; img-src 'self' blob: data: https: monitor.clickcease.com script.hotjar.com static.hotjar.com js.chilipiper.com google-analytics.com *.google-analytics.com analytics.google.com *.analytics.google.com; media-src 'self' *.cloudfront.net *.vidyard.com fellow.app framerusercontent.com; worker-src 'self' blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.adroll.com *.hs-banner.com *.hs-scripts.com *.twimg.com *.twitter.com *.youtube.com *.cloudflare.com bat.bing.com cdn.heapanalytics.com cdn.segment.com connect.facebook.net ct.capterra.com d.adroll.mgr.consensu.org fellow.app forms.hubspot.com js.hs-analytics.net js.hsadspixel.net js.hscollectedforms.net js.hsleadflows.net monitor.clickcease.com optimize.google.com script.hotjar.com static.hotjar.com snap.licdn.com static.cloudflareinsights.com static.hotjar.com www.clickcease.com google-analytics.com *.google-analytics.com www.google.com googleadservices.com *.googleadservices.com googleads.g.doubleclick.net *.googletagmanager.com www.gstatic.com *.googleoptimize.com youtube.com js.usemessages.com *.vidyard.com www.gstatic.com js.chilipiper.com use.fontawesome.com yoast.com fellowapp.bamboohr.com *.clarity.ms c.bing.com tag.clearbitscripts.com *.clearbitjs.com assets.cello.so embed.typeform.com bat.bing.com *.pocustrack.com pocustrack.com framerusercontent.com events.framer.com *.hsforms.net app.revenuehero.io cdn.rudderlabs.com cdn.jsdelivr.net www.redditstatic.com embeds.beehiiv.com cdn.debugbear.com edit.framer.com beehiiv-adnetwork-production.s3.amazonaws.com https://s3-us-west-2.amazonaws.com/b2bjsstore/ *.intercom.io js.intercomcdn.com app.ablecdp.com; frame-src 'self' blob: fellow.app app.hubspot.com forms.hubspot.com vars.hotjar.com www.facebook.com player.vimeo.com vimeo.com www.youtube.com youtube.com optimize.google.com anchor.fm *.twitter.com open.spotify.com embed-standalone.spotify.com *.vidyard.com www.google.com recaptcha.google.com *.chilipiper.com clarity.microsoft.com bid.g.doubleclick.net td.doubleclick.net form.typeform.com forms.hsforms.com *.schedulehero.io embeds.beehiiv.com www.googletagmanager.com edit.framer.com; font-src 'self' data: fellow.app fonts.gstatic.com script.hotjar.com *.typekit.net framerusercontent.com app.framerstatic.com; style-src 'self' 'unsafe-inline' *.twitter.com fellow.app fonts.googleapis.com optimize.google.com static.hotjar.com script.hotjar.com embed.typeform.com *.typekit.net

text/html

Tue, 12 Aug 2025 17:46:41 GMT

Tue, 12 Aug 2025 17:07:04 GMT

<https://framerusercontent.com>; rel="preconnect", <https://framerusercontent.com>; rel="preconnect"; crossorigin=""

{"success_fraction":0,"report_to":"cf-nel","max_age":604800}

strict-origin-when-cross-origin

{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M07gCWHztHj6WfjRBlE4CSQTUr6%2B8EYTo6XQ9lMixwz3oIGeC6wmmDwrhco0hOoSXdXoGNNea81TRBt%2BlamdORFYcXBRZ8mvwgzwoDmDEBEOesL2OuXukrnVHAFar1CD3vbuPCaWKQ%3D%3D"}],"group":"cf-nel","max_age":604800}

cloudflare

region;desc="ca-central-1", cache;desc="cached", ssg-status;desc="optimized", version;desc="17794e1" cfL4;desc="?proto=TCP&rtt=0&min_rtt=0&rtt_var=0&sent=0&recv=0&lost=0&retrans=0&sent_bytes=0&recv_bytes=0&delivery_rate=0&cwnd=0&unsent_bytes=0&cid=3799d034977768b1&ts=1232&x=0" cfReqDur;dur=1375.253

max-age=31536000

Accept-Encoding

nosniff

SAMEORIGIN