Security Analysis Results

bytes

23525

HIT

9b6803d81cb622a6-CDG

max-age=43200

keep-alive

gzip

en

11492

text/html; charset=utf-8

Wed, 31 Dec 2025 07:20:33 GMT

Wed, 31 Dec 2025 00:48:27 GMT

cloudflare

max-age=16070400; includeSubDomains

Cookie, Accept-Encoding, origin

2.0 heroku-router

HIT

style-src 'self' 'unsafe-inline' https://code.cdn.mozilla.net https://fonts.googleapis.com https://tagmanager.google.com https://platform.twitter.com https://assets.mofoprod.net/static/ https://cdn.commento.io/css/commento.css https://www.googletagmanager.com/debug/badge.css https://js.tito.io https://cdnjs.cloudflare.com/ajax/libs/gsap/3.8.0/gsap.min.js https://cdnjs.cloudflare.com/ajax/libs/gsap/3.8.0/ScrollTrigger.min.js https://mozillafoundation.tfaforms.net https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css; img-src * data: blob: https://*.fundraiseup.com https://ucarecdn.com https://pay.google.com https://*.paypalobjects.com; media-src 'self' https://s3.amazonaws.com/mofo-assets/foundation/video/ https://assets.mofoprod.net/static/ https://assets.mofoprod.net/network/media/ https://player.vimeo.com/ https://*.akamaized.net/ https://*.vimeocdn.com/; default-src 'none'; connect-src *; child-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; frame-src 'self' 'unsafe-inline' *.paypalobjects.com https://www.youtube.com https://comments.mozillafoundation.org/ https://airtable.com https://docs.google.com/ https://platform.twitter.com https://public.zenkit.com https://calendar.google.com https://www.youtube-nocookie.com https://devopstypeform.typeform.com https://player.vimeo.com https://mofo-infographics.s3.amazonaws.com https://form.typeform.com https://js.tito.io https://checkout.tito.io https://anchor.fm https://datawrapper.dwcdn.net https://player.simplecast.com *.fundraiseup.com *.stripe.com *.plaid.com *.paypal.com pay.google.com https://logwork.com https://rbsteed.com https://vimeo.com https://www.google.com/recaptcha/; worker-src 'self'; script-src 'self' 'unsafe-inline' *.paypalobjects.com https://www.google-analytics.com/analytics.js http://*.shpg.org/ https://comments.mozillafoundation.org/ https://airtable.com https://platform.twitter.com https://cdn.syndication.twimg.com https://assets.mofoprod.net/static/ https://embed.typeform.com https://www.googletagmanager.com/gtm.js https://www.googletagmanager.com/debug/bootstrap https://www.googletagmanager.com/debug/badge https://tagmanager.google.com *.googletagmanager.com https://cdn.commento.io/js/commento.js https://js.tito.io https://js-plugins.tito.io/gtm.js https://checkout.tito.io *.stripe.com m.stripe.network *.fundraiseup.com *.plaid.com *.src.mastercard.com *.checkout.visa.com pay.google.com *.paypal.com https://mozillafoundation.tfaforms.net https://cdn.cookielaw.org 'unsafe-eval' 'nonce-RWCTMwH+1/iF5l4fgK4yrA=='; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com https://code.cdn.mozilla.net https://assets.mofoprod.net/static/ https://cdn.commento.io/fonts/ *.fundraiseup.com *.stripe.com data: https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/; frame-ancestors 'self'

same-origin-allow-popups

{"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}

strict-origin-when-cross-origin

{"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=YvBLlkYOs79TsFWPL5KIrfUYgi6Yf2Z8J6rQ5TB1%2Byo%3D\u0026sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add\u0026ts=1767142107"}],"max_age":3600}

heroku-nel="https://nel.heroku.com/reports?s=YvBLlkYOs79TsFWPL5KIrfUYgi6Yf2Z8J6rQ5TB1%2Byo%3D&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&ts=1767142107"

nosniff

DENY