technology software

English

__stripe_sid

__stripe_mid

_fbp

_ga_GEK3VL33YR

Within the commercial generic top-level domain (.com), 'linqapp.com' is registered and has no subdomain. Count 7 characters in 'linqapp' containing two vowels alongside 5 consonants. Breaking it apart gives three words: lin, q, app. Median word length comes out to 3 characters. 'lin' is most common in Sinhala usage. You may catch it in English and Italian as well. Taken together, it feels Sinhala.

html/d9/69/d96908d6-449f-4dd7-b1b9-bb0a4de1984a.html.gz

connect-src 'self' data: *.linqapp.com api-iam.intercom.io wss://nexus-websocket-a.intercom.io api.amplitude.com bam.nr-data.net www.google-analytics.com res.cloudinary.com https://api.rollbar.com https://www.facebook.com https://vimeo.com webhooks.fivetran.com https://wistia.com *.wistia.com *.wistia.net;frame-src 'self' js.stripe.com https://player.vimeo.com https://www.youtube.com/ https://wistia.com https://fast.wistia.net *.wistia.com *.wistia.net;img-src 'self' data: res.cloudinary.com www.facebook.com https://i.vimeocdn.com https://js.intercomcdn.com https://static.intercomassets.com *.wistia.com *.wistia.net;script-src 'self' 'unsafe-eval' https://connect.facebook.net https://js.stripe.com https://assets.calendly.com https://widget.intercom.io https://js-agent.newrelic.com https://bam.nr-data.net https://www.googletagmanager.com;script-src-elem 'self' 'unsafe-inline' assets.calendly.com bam.nr-data.net connect.facebook.net js-agent.newrelic.com js.intercomcdn.com js.stripe.com widget.intercom.io www.googletagmanager.com https://www.youtube.com/;script-src-attr 'unsafe-inline';report-uri https://linqapp.report-uri.com/r/d/csp/reportOnly;default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests

default-src 'self' blob: *;script-src 'nonce-M1Oadq8Y' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self' https://*.google-analytics.com *.google.com;style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com https://*.google-analytics.com;font-src 'self' data: blob: *;img-src 'self' data: blob: * https://*.google-analytics.com;media-src 'self' data: blob: *;child-src 'self' data: blob: *;frame-src 'self' data: blob: *;manifest-src 'self' data: blob: *;object-src 'self' data: blob: *;worker-src 'self' data: blob: *;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';

application/x-www-form-urlencoded; charset=UTF-8

__privateStripeMetricsController3440

b7d6fb8dd72d3fcd6553c9eacf2ca37b4d1ebb4e13f1f40421aad009b420d578

cf4012855810edd80ff5404202e855e5c57f735d55131472105b51987d81cd35

d4297bd06e5903e248ab88a2d39b0db3767a553e1a4bd2f942eaf5475cdbd7ee

app-id=1492946255, app-clip-bundle-id=com.linq.app.Clip, app-clip-display=card

apple-itunes-app

viewport-fit=cover, width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no

viewport

format-detection

msapplication-tap-highlight

apple-mobile-web-app-capable

apple-mobile-web-app-title

apple-mobile-web-app-status-bar-style

https://res.cloudinary.com/linq/image/upload/w_1200/v1762042882/profile_photos/n40orxdpvle1cmbfu5ez.png

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/


      // this code is the most basic way i could find to force you into https
      // if you land on the page using http. with rails and node there is complicated
      // backend stuff but this was

window.NREUM || (NREUM = {})
NREUM.init = {
distributed_tracing: { enabled: true },
privacy: { cookies_enabled: true },
}
window.NREUM || (NREUM = {}),
(__nr_require = (function (t, e, n) {
function r

window.dataLayer = window.dataLayer || []
function gtag() {
dataLayer.push(arguments)
}
gtag('js', new Date())

gtag('config', 'G-GEK3VL33YR')


Requests	IP Address	Location	AS Autonomous System
21	104.17.24.14	United States	AS13335CLOUDFLARENET
2	157.240.0.6	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
2	104.16.78.6	United States	AS13335CLOUDFLARENET
2	104.18.20.82	United States	AS13335CLOUDFLARENET
2	13.32.121.64	New York, New York, United States	AS16509AMAZON-02
2	104.17.25.14	United States	AS13335CLOUDFLARENET
2	172.64.146.81	United States	AS13335CLOUDFLARENET
2	34.209.59.145	Boardman, Oregon, United States	AS16509AMAZON-02
2	18.173.205.118	United States	AS16509AMAZON-02
2	157.240.0.35	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
149	65	-	-

Security Scan Report: linqapp.com

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History