Traffic Report and Web Analysis for Cash - cash.app

0 :HTTP/2 200
date :Sun, 12 Jul 2026 05:33:48 GMT
content-type :text/html;charset=utf-8
cf-ray :a19dacd61939482b-CDG
cf-cache-status :BYPASS
cache-control :max-age=60, must-revalidate
expires :Thu, 01 Jan 1970 00:00:00 GMT
server :cloudflare
x-xss-protection :1; mode=block
strict-transport-security :max-age=31536000
content-security-policy :default-src 'self' https://cash-f.squarecdn.com https://cash-c.squarecdn.com https://squareup.com; s
tyle-src 'self' 'unsafe-inline' https://cash-f.squarecdn.com https://cash-c.squarecdn.com 'unsafe-in
line' https://fonts.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com ht
tps://fonts.googleapis.com; font-src 'self' https://cash-f.squarecdn.com https://cash-c.squarecdn.co
m https://fonts.gstatic.com https://fonts.gstatic.com data:; img-src 'self' data: blob: https://trac
ker.samplicio.us https://cash-f.squarecdn.com https://cash-c.squarecdn.com https://cash-s.squarecdn.
com https://cash-images-f.squarecdn.com https://site-assets.afterpay.com https://cash.app https://im
ages.ctfassets.net/ https://images.squareup.com https://jumbotron-production-f.squarecdn.com https:/
/api.squareup.com https://notify.bugsnag.com https://*.googleapis.com https://*.gstatic.com *.google
.com *.googleusercontent.com data: https://api.cash.app https://rs.fullstory.com https://cdn.cookiel
aw.org https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.
google-analytics.com https://google-analytics.com https://googleads.g.doubleclick.net *.google.com h
ttps://stats.g.doubleclick.net tag.rmp.rakuten.com track.linksynergy.com https://www.facebook.com ve
rifi.pdscrb.com https://logs-01.loggly.com https://cashapp.pxf.io https://www.ojrq.net https://cdn.c
oframe.com https://mark-1.coframe.com https://*.basemaps.cartocdn.com https://basemaps.cartocdn.com;
 media-src 'self' https://videos.ctfassets.net https://cash-f.squarecdn.com https://cash-c.squarecdn
.com https://cash-s.squarecdn.com; frame-src 'self' *.google.com https://www.google.ca https://asset
s.ctfassets.net https://player.vimeo.com squarecash: https://square.com *.google.com https://www.goo
gletagmanager.com https://bid.g.doubleclick.net https://td.doubleclick.net https://www.facebook.com 
https://cashapp.pxf.io https://cdn.coframe.com https://mark-1.coframe.com; object-src https://assets
.ctfassets.net; script-src 'nonce-AMjGRoPhDNM3LeL9LrSC++U=' 'self' 'unsafe-inline' 'wasm-unsafe-eval
' https://player.vimeo.com https://cash-f.squarecdn.com https://cash-c.squarecdn.com squarecash: htt
ps://squareup.com https://*.googleapis.com https://edge.fullstory.com https://rs.fullstory.com https
://cdn.cookielaw.org https://www.googletagmanager.com https://tagmanager.google.com https://google-a
nalytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://googleads.g.d
oubleclick.net *.google.com tag.rmp.rakuten.com track.linksynergy.com https://connect.facebook.net d
34r8q7sht0t9k.cloudfront.net https://utt.impactcdn.com https://edge.cofra.me https://cdn.coframe.com
; worker-src 'self' blob:; connect-src 'self' https://api.smartrecruiters.com https://browser-intake
-datadoghq.com/api/v2/rum https://cash-f.squarecdn.com https://cash-c.squarecdn.com https://crz5fygf
73g7.statuspage.io https://c2nqm6xyr4t4.statuspage.io https://api.squareup.com https://squareup.com 
https://*.bugsnag.com 'self' https://*.googleapis.com *.google.com https://*.gstatic.com data: blob:
 https://signal.cash.app https://api.cash.app https://edge.fullstory.com https://rs.fullstory.com ht
tps://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://
www.google-analytics.com https://google-analytics.com https://www.googleadservices.com https://stats
.g.doubleclick.net verifi.podscribe.com verifi.pdscrb.com pixel.tapad.com ipv4.podscribe.com ipv4.pd
scrb.com https://cashapp.pxf.io https://edge.cofra.me https://cdn.coframe.com https://ingest.app.cof
rame.com https://mark-1.coframe.com https://*.basemaps.cartocdn.com https://basemaps.cartocdn.com; f
rame-ancestors https://mark-1.coframe.com; base-uri 'none'; report-uri /event/csp-report; form-actio
n 'none'
frame-options :SAMEORIGIN
x-content-type-options :nosniff
x-envoy-upstream-service-time :5
x-frame-options :SAMEORIGIN
set-cookie :__nsid=f02500d2-adc1-453e-b532-7f357b02db10; Path=/; Expires=Mon, 12-Jul-2027 05:33:47 GMT; Max-Age=
31536000; Secure; HttpOnly