affinityplus.org website report

HTTP/2 200
date: Thu, 22 Oct 2026 08:40:31 GMT
content-type: text/html; charset=utf-8
content-length: 33182
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
expires: -1
vary: Accept-Encoding
content-security-policy: default-src 'self'; script-src 'self' *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://*.googletagmanager.com cdnjs.cloudflare.com https: https://www.youtube.com/iframe_api https://cdn.insight.sitefinity.com https://dec.azureedge.net/ munchkin.marketo.net https://www.googletagmanager.com/ http://siteimproveanalytics.com/ http://bat.bing.com/ https://up.pixel.ad/ https://tags.tiqcdn.com/ https://code.jquery.com/ui/1.13.2/jquery-ui.min.js https://embed.signalintent.com/js/embedded.js https://cdn.pdst.fm/ping.min.js https://cdn01.basis.net/assets/up.js https://embed.signalintent.com/ https://cdn.segment.com/ https://ticketmaster-api-staging.github.io/ https://d1lvyn09g7nf92.cloudfront.net/ https://code.jquery.com/jquery-3.6.0.min.js https://cobrowsing.eltropy.com/ https://www.universe.com/embed.js https://*.poshdevelopment.com/ *.eloqua.com js.hs-scripts.com js.hs-analytics.net *.en25.com https://cobrowse.eltropy.com/sdk-js/CobrowseIO.js cdn.ampproject.org 'unsafe-inline' 'unsafe-eval'; style-src 'self' *.googleapis.com *.gstatic.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com https: https://cdn.insight.sitefinity.com https://dec.azureedge.net https://use.typekit.net/ https://up.pixel.ad/ https://p.typekit.net/ https://embed.signalintent.com/ https://ticketmaster-api-staging.github.io/ 'unsafe-inline'; img-src 'self' *.gstatic.com *.googleapis.com platform.tumblr.com web.facebook.com www.facebook.com www.redditstatic.com www.linkedin.com i.ytimg.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: https://*.googletagmanager.com https: *.google-analytics.com https://dec.azureedge.net https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.eloqua.com track.hubspot.com https://*.affinityplus.org/ https://77899.global.siteimproveanalytics.io/ https://bat.bing.com/ https://www.google.com/ https://www.googletagmanager.com/ https://c.bing.com/ https://ticketmaster-api-staging.github.io/ https://s1.ticketm.net/ https://d1lvyn09g7nf92.cloudfront.net/Affinity-Plus-FCU-28142353/ *.sitescout.com/ https://attribution.sitescout.com/ https://www.buzzsprout.com/ https://storage.buzzsprout.com/ https://arttrk.com/ https://r.turn.com/r/; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: https: https://use.typekit.net/ https://embed.signalintent.com/ https://ticketmaster-api-staging.github.io/; frame-src https: https://tags.tiqcdn.com/ https://pixel-sync.sitescout.com/ https://www.youtube.com/ https://prod.cplxpress.affinityplus.org https://www.buzzsprout.com/902341 https://messages.affinityplus.org/ https://cobrowsing.eltropy.com/ https://*.poshdevelopment.com/ https://cloud.email.affinityplus.org/ https://11771693.fls.doubleclick.net/ 'self'; connect-src 'self' data: accounts.google.com *.google-analytics.com *.gstatic.com https://*.googletagmanager.com https://*.googleapis.com/ https: https://*.insight.sitefinity.com https://*.dec.sitefinity.com *.mktoresp.com https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://staging.poshdevelopment.com/ https://analytics.google.com/ https://thefontzone.com/ https://maps.googleapis.com/ https://pixels.spotify.com/ https://cdn.segment.com/ https://calc-backend-prod.herokuapp.com/ https://timetrade.affinityplus.org/ https://app.ticketmaster.com/ https://api.segment.io/ https://www.google.com/ccm/collect https://messages.affinityplus.org/ https://cobrowsing.eltropy.com/ https://bat.bing.com/ https://*.poshdevelopment.com/ wss://*.cobrowse.eltropy.com; media-src 'self' data: blob: https:; child-src 'self' https://stats.g.doubleclick.net/ https://pixel.sitescout.com/ https: www.google.com; frame-ancestors https: https://prod.cplxpress.affinityplus.org https://*.affinityplus.org 'self'
cross-origin-embedder-policy: unsafe-none
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
permissions-policy: camera=(self "https://messages.affinityplus.org"), gyroscope=(), magnetometer=(), microphone=(self "https://messages.affinityplus.org"), payment=(), usb=()