technology software

English

__stripe_sid

__stripe_mid

_fbp

_ga_GEK3VL33YR

The domain 'linqapp.com' uses the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'linqapp' spans 7 characters holding 2 vowels versus five consonants. Splitting it apart reveals 3 words: lin, q, app. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

html/35/59/3559c2db-237f-436f-9340-6838613b7843.html.gz

connect-src 'self' data: *.linqapp.com api-iam.intercom.io wss://nexus-websocket-a.intercom.io api.amplitude.com bam.nr-data.net www.google-analytics.com res.cloudinary.com https://api.rollbar.com https://www.facebook.com https://vimeo.com webhooks.fivetran.com https://wistia.com *.wistia.com *.wistia.net;frame-src 'self' js.stripe.com https://player.vimeo.com https://www.youtube.com/ https://wistia.com https://fast.wistia.net *.wistia.com *.wistia.net;img-src 'self' data: res.cloudinary.com www.facebook.com https://i.vimeocdn.com https://js.intercomcdn.com https://static.intercomassets.com *.wistia.com *.wistia.net;script-src 'self' 'unsafe-eval' https://connect.facebook.net https://js.stripe.com https://assets.calendly.com https://widget.intercom.io https://js-agent.newrelic.com https://bam.nr-data.net https://www.googletagmanager.com;script-src-elem 'self' 'unsafe-inline' assets.calendly.com bam.nr-data.net connect.facebook.net js-agent.newrelic.com js.intercomcdn.com js.stripe.com widget.intercom.io www.googletagmanager.com https://www.youtube.com/;script-src-attr 'unsafe-inline';report-uri https://linqapp.report-uri.com/r/d/csp/reportOnly;default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests

default-src 'self' blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;script-src 'nonce-aYPh98Tm' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self';style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com;font-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;img-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;media-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;child-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;frame-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;manifest-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;object-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;worker-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';

application/x-www-form-urlencoded; charset=UTF-8

__privateStripeMetricsController7520

682c2461685ccab9440db6922fcc1e08743ee9e15866549c190a7906fce8b7ee

83a3dad0e2b07d3ec4ece31d37fad1e8156060b2ff3003342395e3d5edb689bb

app-id=1492946255, app-clip-bundle-id=com.linq.app.Clip, app-clip-display=card

apple-itunes-app

viewport-fit=cover, width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no

viewport

format-detection

msapplication-tap-highlight

apple-mobile-web-app-capable

apple-mobile-web-app-title

apple-mobile-web-app-status-bar-style

https://res.cloudinary.com/linq/image/upload/w_1200/v1763147968/profile_photos/trageyawlut1lmg6a6jh.jpg

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Cloudflare, Inc.

LINQAPP.COM


      // this code is the most basic way i could find to force you into https
      // if you land on the page using http. with rails and node there is complicated
      // backend stuff but this was easy enough and seems to work.
      var prodHost = 'web.linqapp.com'
      var newProdHost = 'www.linqapp.com'
      var linqAppDotCom = 'linqapp.com'
      var stagingHost = 'staging-web.linqapp.com'
      if (
        (prodHost === window.location.host ||
          stagingHost === window.location.host ||
          newProdHost === window.location.host ||
          linqAppDotCom === window.location.host) &&
        window.location.protocol != 'https:'
      ) {
        window.location.protocol = 'https'
      }
    

window.dataLayer = window.dataLayer || []
function gtag() {
dataLayer.push(arguments)
}
gtag('js', new Date())

gtag('config', 'G-GEK3VL33YR')


Requests	IP Address	Location	AS Autonomous System
6	104.17.25.14	Unknown	Unknown
2	216.239.34.36	Unknown	Unknown
2	162.247.243.29	Unknown	Unknown
2	104.16.79.6	Unknown	Unknown
2	146.75.120.176	Unknown	Unknown
2	104.18.41.175	Unknown	Unknown
2	104.18.21.82	Unknown	Unknown
2	157.240.0.6	Unknown	Unknown
2	104.75.88.44	Unknown	Unknown
2	18.173.205.118	Unknown	Unknown
148	72	-	-

Security Scan Report: linqapp.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History