government public service

healthcare medical

adult content

real estate property

news media journalism

English

cf_clearance

whid

_dd_s

The domain 'whimsical.com' uses the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'whimsical' spans 9 characters containing three vowels alongside six consonants. Tokenizing the label suggests one word: whimsical. No strong language cues emerged from the frequency lists.

object-src 'none'; script-src 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval' 'nonce-LGRLieumN0TTQNujTmdkYkSsjAOZPwvjvmaQ7ZP37DA=' 'nonce-Br2NMiuxFZrFuIlv00Ut9ndtvl16/hjDUrdcdtygPfY='; base-uri 'none'; frame-ancestors 'none'

2c661243a899a9c109dfb8a98e5f5c22f96c898e7dcbf6a9795513df2ca0d076

46c876f1f946e9c3ed3d588a3445f0e88ec82e5de149ceba2058ec25ae054387

f6260f11370d2b47dc67450ddc15b0fa8fc82c6560fe6584c99dfc19157c0cd6

b2c38f5d9c8b6b68f34958a6c8cdd175c27aeb894ee5cd15963c67d030ca0439

cf24eb8d0f972b1cc6e215d1864a52ee29bbf2c08dc91b7d28b8b6a10b0b7005

6aedd6b9c2e447cc0621738dcdb9a70beb0feee445f234b2014e0b89f219df84

cd0bbb9f0464e616cfe9bfa1d0a18131a4a23feb7e032b0161709625d40b68fa

f9996bb62bfaee167b944fcd3be3d48687bf414f8a9d43b2a75c795be5c0834a

6abb4baf9d5da1b1e85d549477f4d13c9126d58bc6b4089b8c05efef4476499a

d5561421c91ea50cad7b0970b64b15f9230fcc463255780b8038868906cfbd89

66b435008c0d8f90bf32c5d74580c67a7ee9a0aa91c37d01b63fbda613d26e1a

ffa4813ea5be196fbfff89e55d7e98d6747d756961d20b1027a28aef57631fa0

774f050c55098701844083aff5201afee4eb6be83cf17881d8ac7e2c5ebf1410

f903d8e3a2c869ef651b63e4d7ad67233a4ed5237c9fc9748131655ef1e912bc

06c14230506b55b6d1f23d3554badb361f5916a209bc5c1f1b88ad3abd176776

width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no

viewport

Whimsical combines whiteboards and docs in an all-in-one collaboration hub.

description

https://imgr.whimsical.com/thumbnails/XaXNjrmkdbtBG2G7NyskVK/TTniJgrFnSqVhWfnGSPjPx

https://whimsical.com/valerie-gueret-dehee-XaXNjrmkdbtBG2G7NyskVK

twitter:site

twitter:card

twitter:image

twitter:title

twitter:description

robots

object-src 'none'; script-src 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval' 'nonce-kYAexdhv0li7Fqy1BEVyWXox83y7se6kMYaJzbHMZVc=' 'nonce-2w1RQbTFDXtMqlnMGg+oecheMMsHmMcMTNNsO3rrCRI='; base-uri 'none'; frame-ancestors 'none'

NameCheap, Inc.

WHIMSICAL.COM

Abuse Contact

Datacamp Ltd. technical staff

DATACAMP-MNT

CDNEXT_FRA

if ("serviceWorker" in navigator) {
  try {
    var options = { scope: "/" };

    navigator.serviceWorker
      .register("/s/js/service-worker.js", options)
      .catch(function (error) {
        console.warn("Service worker registration error:", error);
      });

    // Disable homescreen install prompt
    window.addEventListener("beforeinstallprompt", function (event) {
      event.preventDefault();
    });
  } catch (error) {
    console.warn("Service worker registration error:", error);
  }
}



   

   // Raise V8's stack-capture limit (default 10) so a stack overflow's
   // *originating* frame — thousands of frames below the throw point — is
   // retained in error.stack for the diagnostic capture below. V8/Chromium/
   // Electron only (JSC/iOS ignores it, and those overflows are stackless
   // anyway). Cost is paid only by genuinely deep stacks (rare); shallow errors
   // are capped at their real depth. Revert once APP-EYY / APP-BBV are localized.
   try { Error.stackTraceLimit = 100000; } catch (e) {}

   window.Sentry.init({
     dsn: "https://32c54650e5c6438a83f65990accef5c1@o596406.ingest.sentry.io/6692856",
     integrations: [Sentry.browserTracingIntegration()],
     tracesSampleRate: 0.01, // 1% of sessions
     release: "565aadf80a01e1808c86bebfddf648dfd27fba7a",
     environment: "production",
     initialScope: {tags: {mode: "default"}},
     ignoreErrors: [
       // Android WebView bridge errors (Instagram, etc.) — native Java objects
       // get garbage collected before JS finishes using them
       /Java object is gone/,
       // Browser implementation detail, not an actual error
       /ResizeObserver loop completed with undelivered notifications/,
       /ResizeObserver loop limit exceeded/,
     ],
     // "Maximum call stack size exceeded" handling (WHIM-962). Two behaviours,
     // both scoped to that one message:
     //
     // 1. DROP the APP-EYY / iOS-WebKit fingerprint. These arrive via onerror
     //    with no usable stack (Sentry synthesizes a single `undefined:NN:NN`
     //    frame); the raw thrown value's .stack is JavaScriptCore's bare `fn@`
     //    form with ZERO source locations — no `scheme://`, no `:line:col`.
     //    Nothing to symbolicate, and WebKit hard-caps the stack at 100 frames
     //    so the originating frame is unrecoverable regardless. ~100% iOS; not
     //    our bundle (our frames carry a URL). Unactionable noise — drop it.
     //    The check (a stack that exists but contains no "://") can never match
     //    a V8/desktop overflow (APP-BBV), whose frames always carry
     //    `scheme://…:line:col`, so every first-party overflow is kept.
     //
     // 2. ENRICH everything else (kept overflows): stash the raw thrown value's
     //    type and the head + tail of its own .stack — Sentry symbolicates only
     //    the top frames, so the *tail* carries the originating app frame (the
     //    base of a deep overflow) that pins where the recursion starts. Also
     //    tag the origin so it is searchable/aggregatable (extra is not). For
     //    onerror reports with a null error object the message lives on
     //    event.exception.values[0].value (not event.message and not on any
     //    error object), so we check all three sources.
     //
     // Wrapped in try/catch: a throw here makes Sentry drop the event, and a
     // pathological thrown value (throwing toString/getter) is exactly what an
     // overflow can produce — enrichment must never lose the event. (A throw
     // before the explicit `return null` below means a kept event, never a
     // wrongly-dropped one.)
     beforeSend: function (event, hint) {
       try {
         var ex = hint && hint.originalException;
         var exVal = event.exception && event.exception.values && event.exception.values[0];
         var msg = (ex && ex.message) || (exVal && exVal.value) || event.message || "";
         if (/Maximum call stack size exceeded/i.test(msg)) {
           var hasStack = !!(ex && ex.stack);
           var origin = !ex ? "no-error-object" : (hasStack ? "has-stack" : "empty-stack");
           var lines = hasStack ? String(ex.stack).split("\n") : null;
           // Drop the unactionable iOS-WebKit fingerprint (see comment above).
           // Precision-first: only drop a deep stack with NO source info at all —
           // no `scheme://` and no `:line:col` on any frame. A real overflow
           // (V8/desktop or first-party WebKit) always references a loaded script,
           // so it keeps at least one `://…:line:col` frame and is never dropped.
           // We accept missing some noise over ever losing a real event.
           if (hasStack
               && lines.length > 20
               && String(ex.stack).indexOf("://") === -1
               && !/:\d+:\d+/.test(ex.stack)) {
             return null;
           }
           event.extra = Object.assign({}, event.extra, {
             "raw-error-type": (ex && ex.constructor && ex.constructor.name) || null,
             "raw-error-string": ex ? String(ex) : "<no originalException; onerror error=null>",
             "raw-stack-frames": lines ? lines.length : 0,
             "raw-stack-head": lines ? lines.slice(0, 15).join("\n").slice(0, 2000)
                                     : (ex ? "<empty .stack>" : "<no originalException; onerror error=null>"),
             // keep the END of the tail: the originating frame is the last line, so cap from the right
             "raw-stack-tail": (lines && lines.length > 15) ? lines.slice(-40).join("\n").slice(-4000) : null
           });
           event.tags = Object.assign({}, event.tags, { "whim.overflow-origin": origin });
         }
       } catch (e) {}
       return event;
     },
   });


(function(){var m=(document.cookie.match(/(?:^|; )whicm=([^;]*)/)||[,"whimsy"])[1];if(!/^(?:whimsy|light|dark|system)$/.test(m))m="whimsy";var e=m==="system"?(matchMedia('(prefers-color-scheme: dark)').matches?"dark":"whimsy"):m;var r=document.documentElement;r.setAttribute('data-color-mode-preference',m);r.setAttribute('data-color-mode',e);})();

try {wh.init({"API":"","T":true,"CID":"069ffcf0-766c-48ee-82dd-8414d7fe7ea0"})}catch(e){console.error(e)}

window.plausible = window.plausible || function() { (window.plausible.q = window.plausible.q || []).push(arguments) }

window.onload=function(){if(typeof app=='undefined' || typeof app.main=='undefined' || typeof shadow$provide=='undefined'){document.getElementById('root').innerHTML = '<div class="load-error"><div>Sorry, the application did not load successfully. ¯\\_(ツ)_/¯</div><a href=".">Try Again</a></div>'}else{app.main.init({"stripe-publishable-key":"pk_live_7SXLlrWc9L9TVHEPdCJc9dEE","sentry-dsn":"https://32c54650e5c6438a83f65990accef5c1@o596406.ingest.sentry.io/6692856","datadog":{"client-token":"pubbf47b6a4f288437eaf9738178a139a88","site":"datadoghq.com"},"cid":"069ffcf0-766c-48ee-82dd-8414d7fe7ea0","server":{"url":"https://whimsical.com"},"api-url":"","stylesheets":{"app":{"href":"/s/css/app.min_e8fdf21e1e783f59fe3d7206e1f55cc1.css"},"bundle":{"href":"/s/css/bundle.min_11ea3d586770df974522f644a728b35e.css","id":"bundle-css"},"fonts":{"href":"/s/css/fonts.min_9c1a91bf40f13322a5635aedc9f3b494.css"}},"e2e?":null,"stripe":null,"team-home":{"board-template-id":"f1e69be2-4b3e-4a0a-bf47-1bbe3edb2bff","doc-template-id":"b1d74511-628d-4936-8904-c417253bebec"},"desktop-app-client-id":"d198c625-43bb-4573-af50-c0453ec2d3df","cloudflare-turnstile-site-key":"0x4AAAAAABmZaGeofY8Nxy_I","environment":"production","imager-url":"https://imgr.whimsical.com","hide-details-folder-ids":["5dd61558-fa14-4b41-995f-d6a87045b290","3b448d89-0d4d-47ae-962b-61b29d20f2af"],"standard-template-folder-id":"5dd61558-fa14-4b41-995f-d6a87045b290"})}}

Cloudflare Bot Management

HSTS

Cloudflare

Plausible

untitled

browser.sentry-cdn.com

Tracking domain: o596406.ingest.sentry.io

o596406.ingest.sentry.io

plausible.io

✅ Low Risk - https://whimsical.com/valerie-gueret-dehee-XaXNjrmkdbtBG2G7NyskVK

Requests	IP Address	Location	AS Autonomous System
12	172.66.40.179Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	151.101.130.217Fastly · CDN	United States	AS54113Fastly, Inc.
12	185.111.111.154	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
36	3	-	-

Security Scan Report: whimsical.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History