Security Analysis Results

pagaleve.gupy.io

Comprehensive domain security and infrastructure analysis

Live Website Preview

website screenshot of https://pagaleve.gupy.io/candidates/signin

No Security Risks Detected

This domain appears to be safe and secure

100%
Score

Disclaimer: This assessment is based on automated analysis of publicly available information. Results are for informational purposes only. For critical applications, consult security professionals.

Scan Information

Last checked:July 14, 2025 23:16:28
Scan Complete

Refresh page after 10 minutes
for updated results

Page Information

Target URL
https://pagaleve.gupy.io/candidates/signin
Page Title
Gupy
pagaleve.gupy.io faviconSite Favicon
Status
Active

Host Information

Domain
pagaleve.gupy.io
Server
N/A
Country
Spain
IP Address
18.154.41.5
ASN Information
16509
AMAZON-02

Technologies

Amazon Web Services logo
Amazon Web Services
PaaS
Hotjar logo
Hotjar
Analytics
HSTS logo
HSTS
Security
Google Tag Manager logo
Google Tag Manager
Tag managers
Google Analytics logo
Google Analytics
Analytics
Amazon S3 logo
Amazon S3
CDN
+1 more technologies detected

SSL Certificate

HTTPS Enabled
Secure
Certificate Issuer
49m356 Gateway Proxy BISO MITM CA
Valid From
2025-07-14 05:00:31
Valid Until
2025-08-13 05:01:01
Subject Name
pagaleve.gupy.io

Performance Statistics

38
Total Requests
17
Domains
16
IP Addresses
6.62 MB
Transfer Size
Content Size21.72 MB

HTTP Headers

cache-control
no-cache,max-age=0
cf-team
28acd2ef370000d4e15045c400000001
content-encoding
gzip
content-length
3206
content-security-policy
default-src 'self' *.gupy.io *.googleapis.com *.google.com s3.amazonaws.com *.unpkg.com; connect-src 'self' blob: 'self' *.gupy.io *.my.salesforce-scrt.com data: gap: * *.userguiding.com; font-src 'self' data: *.gupy.io *.gstatic.com use.typekit.net *.bootstrapcdn.com *.hotjar.com *.getbeamer.com; frame-src 'self' *.hotjar.com *.googletagmanager.com *.zdassets.com *.salesforce.com *.my.salesforce-scrt.com *.salesforceliveagent.com service.force.com *.my.site.com *.unpkg.com cookies.pn.vg www.youtube.com *.getbeamer.com *.gupy.io *.google.com youtu.be *.hubspotusercontent40.net *.doubleclick.net blob: *.gupy.io *.facebook.com *.twitter.com *.linkedin.com; img-src 'self' blob: 'self' *.gupy.io data: * *.userguiding.com; object-src 'none'; prefetch-src 'self' *.gupy.io *.googleapis.com *.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.gupy.io *.google.com *.google-analytics.com *.hotjar.com *.getbeamer.com *.googleapis.com *.gstatic.com *.pn.vg cdnjs.cloudflare.com cdn.jsdelivr.net *.segment.com *.mxpnl.com *.heapanalytics.com *.cloudfront.net cdn.privacytools.com.br *.googletagmanager.com *.unpkg.com unpkg.com *.zdassets.com *.salesforce.com *.my.salesforce-scrt.com *.salesforceliveagent.com service.force.com *.my.site.com *.googleoptimize.com *.facebook.net *.handtalk.me *.linkedin.com *.twitter.com *.jquery.com *.cloudflare.com *.chameleon.io *.userguiding.com; style-src 'self' 'unsafe-inline' blob: *.googleapis.com *.gupy.io *.getbeamer.com cdn.privacytools.com.br *.cloudflare.com *.bootstrapcdn.com service.force.com *.my.site.com; media-src 'self' blob: *.zdassets.com s3.amazonaws.com *.salesforce.com *.my.salesforce-scrt.com *.salesforceliveagent.com service.force.com *.my.site.com; frame-ancestors 'self';
content-type
text/html
date
Mon, 14 Jul 2025 23:16:38 GMT
etag
W/"68756feb-1c0b"
last-modified
Mon, 14 Jul 2025 21:00:27 GMT
permissions-policy
accelerometer=(), ambient-light-sensor=(), autoplay=(self), battery=(), camera=(self), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(self), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(self), xr-spatial-tracking=(), clipboard-read=(self), clipboard-write=(self), gamepad=(), speaker-selection=(), conversion-measurement=(), focus-without-user-activation=(), hid=(), idle-detection=(), interest-cohort=(), serial=(), sync-script=(self), trust-token-redemption=(self), vertical-scroll=(self)
referrer-policy
strict-origin-when-cross-origin
server-timing
cfReqDur;dur=1739.433
strict-transport-security
max-age=31536000; includeSubDomains; preload
via
1.1 633fece295fcb199456ab86aeffd3b00.cloudfront.net (CloudFront)
x-amz-cf-id
px-55b6TKV3-UgZiEXnkJFKBl-Ya94bfY8AmEfJRfbr11wKTM3uwfw==
x-amz-cf-pop
MRS52-C2
x-cache
Miss from cloudfront
x-content-type-options
nosniff
x-frame-options
SAMEORIGIN
x-xss-protection
1; mode=block
20 headers detected

Technology Stack Analysis

Amazon Web Services

Amazon Web Services

PaaS

Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.

Hotjar

Hotjar

Analytics

Hotjar is a suite of analytic tools to assist in the gathering of qualitative data, providing feedback through tools such as heatmaps, session recordings, and surveys.

HSTS

HSTS

Security

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

Google Tag Manager

Google Tag Manager

Tag managers

Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.

Google Analytics

Google Analytics

Analytics

Google Analytics is a free web analytics service that tracks and reports website traffic.

Amazon S3

Amazon S3

CDN

Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.

Amazon CloudFront

Amazon CloudFront

CDN

Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.

Website Cookies 2

_dd_s

pagaleve.gupy.io

Strict
Value
rum=0&expire=1752535908664
Expires:7/14/2025

last_candidate_auth_subdomain

.gupy.io

Secure
Value
[last_candidate_auth_subdomain redacted]
Expires:7/15/2025

External Links 1

Candidate support?

suporte-candidatos.gupy.io

Analyze
Target URL
https://suporte-candidatos.gupy.io/s/suporte?language=pt_BR

Requested Domains 17

cdn.privacytools.com.br

Unknown Type
No category information available

cdnjs.cloudflare.com

Unknown Type
No category information available

connect.facebook.net

Unknown Type
No category information available

fonts.googleapis.com

Unknown Type
No category information available

fonts.gstatic.com

Unknown Type
No category information available

front-statics-fonts.gupy.io

Unknown Type
No category information available

gupy.gupy.io

Unknown Type
No category information available

pagaleve.gupy.io

Subdomain
No category information available

plugin.handtalk.me

Unknown Type
No category information available

private-api.gupy.io

Unknown Type
No category information available

region1.analytics.google.com

Unknown Type
No category information available

script.hotjar.com

Unknown Type
No category information available

static.hotjar.com

Unknown Type
No category information available

stats.g.doubleclick.net

Unknown Type
No category information available

unleash-proxy-production.api.tools.gupy.io

Unknown Type
No category information available

www.google.fr

Unknown Type
No category information available

www.googletagmanager.com

Unknown Type
No category information available
LinkCheck

© 2025 LinkCheck. Secure domain analysis you can trust.