apsmerchants.com website report

HTTP/2 200
access-control-allow-origin: https://repay.com
cache-control: public, max-age=86400
content-encoding: gzip
content-security-policy: default-src 'self' repay.com csp-repay.pantheonsite.io dev-repay.pantheonsite.io live-repay.pantheonsite.io; script-src 'self' 'nonce-ziHwqzrQ32BtxhtAjTrj3A==' 'unsafe-eval' blob: js.zi-scripts.com *.hubspot.com *.gstatic.com googleads.g.doubleclick.net https://www.googletagmanager.com/gtag/js https://www.google.com/recaptcha/enterprise.js https://www.googletagmanager.com/gtm.js *.clarity.ms https://js-agent.newrelic.com *.mandatlyonline.com *.fontawesome.com https://cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.js https://cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.js cdn-cookieyes.com *.cdn-cookieyes.com dev-repay.pantheonsite.io live-repay.pantheonsite.io repay.com *.hotjar.com *.hs-scripts.com *.hsleadflows.net *.hs-banner.com *.hsadspixel.net *.hubspotfeedback.com *.usemessages.com *.hs-analytics.net *.hscollectedforms.net *.hsforms.net *.hsforms.com *.incontact.com *.adsrvr.org *.linkedin.com *.licdn.com; style-src 'self' 'unsafe-inline' *.fontawesome.com cdn.jsdelivr.net https://cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.css https://cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css cdnjs.cloudflare.com fonts.googleapis.com dev-repay.pantheonsite.io live-repay.pantheonsite.io; img-src 'self' data: https: c212.net repay.com *.googleadservices.com *.googleads.g.doubleclick.net *.googlesyndication.com *.mandatlyonline.net *.mandatlyonline.com tsgpayments.com rt.prnewswire.com www.googletagmanager.com i.vimeocdn.com *.google.com *.bing.com *.clarity.ms *.gravatar.com *.cookieyes.com cdn-cookieyes.com *.cdn-cookieyes.com *.repay.com *.businesswire.com dev-repay.pantheonsite.io live-repay.pantheonsite.io *.hotjar.com *.hubspot.com *.hubspot.net *.hsforms.com *.linkedin.com *.licdn.com; font-src 'self' data: *.fontawesome.com fonts.googleapis.com fonts.gstatic.com dev-repay.pantheonsite.io live-repay.pantheonsite.io *.hotjar.com repay.com; connect-src 'self' *.zoominfo.com *.zi-scripts.com *.hscollectedforms.net *.googleadservices.com *.googleads.g.doubleclick.net *.googlesyndication.com *.mandatlyonline.net *.mandatlyonline.com vimeo.com *.google.com *.contentsquare.net *.fontawesome.com bam.nr-data.net *.adsrvr.org *.cdn-cookieyes.com *.clarity.ms *.cookieyes.com *.google-analytics.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.hubspot.com *.incontact.com *.licdn.com *.linkedin.com api.hubapi.com cdn-cookieyes.com dev-repay.pantheonsite.io live-repay.pantheonsite.io forms.hsforms.com js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com hubspot-forms-static-embed.s3.amazonaws.com wss://*.hotjar.com wss://*.niceincontact.com; media-src 'self'; object-src 'none'; child-src app.hubspot.com forms.hsforms.com js.hsadspixel.net js.hscollectedforms.net js.usemessages.com; frame-src 'self' *.google.com businessradiox.com *.googletagmanager.com *.incontact.com *.doubleclick.net vars.hotjar.com *.youtube.com *.vimeo.com *.hubspot.com *.repay.com forms.hsforms.com js.hsadspixel.net js.hscollectedforms.net js.usemessages.com; worker-src 'self' blob:; manifest-src 'self'; base-uri 'self'; form-action 'self' javascript: *.hsforms.com *.hubspot.com; frame-ancestors 'self' www.google.com *.repay.com; report-uri /wp-json/repay-csp/v1/report; report-to csp-endpoint; script-src-attr 'unsafe-inline'
content-type: text/html; charset=UTF-8
link: <https://repay.com/wp-json/>; rel="https://api.w.org/", <https://repay.com/wp-json/wp/v2/pages/5816>; rel="alternate"; title="JSON"; type="application/json", <https://repay.com/?p=5816>; rel=shortlink
referrer-policy: strict-origin-when-cross-origin
report-to: {"group":"csp-endpoint","max_age":10080,"endpoints":[{"url":"https:\/\/repay.com\/wp-json\/repay-csp\/v1\/report"}]}
server: nginx
strict-transport-security: max-age=31622400; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-pantheon-styx-hostname: styx-us-a-fbbcf58dd-5hb7w
x-styx-req-id: 18f9e4d5-cd4e-11f1-8672-e6ff5fa84f07
x-xss-protection: 1; mode=block
age: 77453
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish, 1.1 varnish, 1.1 varnish
date: Thu, 22 Oct 2026 10:22:07 GMT
x-served-by: cache-chi-kmdw8640093-CHI, cache-par-lfpb1150062-PAR, cache-par-lfpg1960037-PAR, cache-par-lfpg1960037-PAR
x-cache: HIT, HIT, MISS, MISS
x-cache-hits: 30, 0, 0, 0
x-timer: S1792664527.260141,VS0,VE8
vary: Accept-Encoding, Cookie, Cookie
content-length: 48733