technology software

English

__stripe_sid

__stripe_mid

_fbp

_ga_GEK3VL33YR

The domain 'linqapp.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'linqapp' is 7 characters long split between two vowels and five consonants. Segmentation suggests three words: lin, q, app. Median word length is three characters. No strong language cues emerged from the frequency lists.

html/dd/18/dd1842ad-54b6-4fbf-9e0d-7712921c506d_fallback.html.gz

Linq - BT-VOICE 🔔🔔

html/dd/18/dd1842ad-54b6-4fbf-9e0d-7712921c506d.html.gz

connect-src 'self' data: *.linqapp.com api-iam.intercom.io wss://nexus-websocket-a.intercom.io api.amplitude.com bam.nr-data.net www.google-analytics.com res.cloudinary.com https://api.rollbar.com https://www.facebook.com https://vimeo.com webhooks.fivetran.com https://wistia.com *.wistia.com *.wistia.net;frame-src 'self' js.stripe.com https://player.vimeo.com https://www.youtube.com/ https://wistia.com https://fast.wistia.net *.wistia.com *.wistia.net;img-src 'self' data: res.cloudinary.com www.facebook.com https://i.vimeocdn.com https://js.intercomcdn.com https://static.intercomassets.com *.wistia.com *.wistia.net;script-src 'self' 'unsafe-eval' https://connect.facebook.net https://js.stripe.com https://assets.calendly.com https://widget.intercom.io https://js-agent.newrelic.com https://bam.nr-data.net https://www.googletagmanager.com;script-src-elem 'self' 'unsafe-inline' assets.calendly.com bam.nr-data.net connect.facebook.net js-agent.newrelic.com js.intercomcdn.com js.stripe.com widget.intercom.io www.googletagmanager.com https://www.youtube.com/;script-src-attr 'unsafe-inline';report-uri https://linqapp.report-uri.com/r/d/csp/reportOnly;default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests

default-src 'self' blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;script-src 'nonce-2dhaogld' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self';style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com;font-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;img-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;media-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;child-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;frame-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;manifest-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;object-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;worker-src 'self' data: blob: facebook.net *.facebook.net facebook.com *.facebook.com fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com cdninstagram.com *.cdninstagram.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';

application/x-www-form-urlencoded; charset=UTF-8

default-src 'self' blob: *;script-src 'nonce-gr2b1VpY' *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: 'self' https://*.google-analytics.com *.google.com;style-src 'self' data: blob: 'unsafe-inline';connect-src 'self' data: blob: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* *.cdninstagram.com https://*.google-analytics.com;font-src 'self' data: blob: *;img-src 'self' data: blob: * https://*.google-analytics.com;media-src 'self' data: blob: *;child-src 'self' data: blob: *;frame-src 'self' data: blob: *;manifest-src 'self' data: blob: *;object-src 'self' data: blob: *;worker-src 'self' data: blob: *;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';

__privateStripeMetricsController4680

83a3dad0e2b07d3ec4ece31d37fad1e8156060b2ff3003342395e3d5edb689bb

682c2461685ccab9440db6922fcc1e08743ee9e15866549c190a7906fce8b7ee

app-id=1492946255, app-clip-bundle-id=com.linq.app.Clip, app-clip-display=card

apple-itunes-app

viewport-fit=cover, width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no

viewport

format-detection

msapplication-tap-highlight

apple-mobile-web-app-capable

apple-mobile-web-app-title

apple-mobile-web-app-status-bar-style

https://res.cloudinary.com/linq/image/upload/w_1200/v1763043627/profile_photos/sgthk1usqv6hnbgngvdj.png

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Cloudflare, Inc.

LINQAPP.COM


      // this code is the most basic way i could find to force you into https
      // if you land on the page using http. with rails and node there is complicated
      // backend stuff but this was easy enough and seems to work.
      var prodHost = 'web.linqapp.com'
      var newProdHost = 'www.linqapp.com'
      var linqAppDotCom = 'linqapp.com'
      var stagingHost = 'staging-web.linqapp.com'
      if (
        (prodHost === window.location.host ||
          stagingHost === window.location.host ||
          newProdHost === window.location.host ||
          linqAppDotCom === window.location.host) &&
        window.location.protocol != 'https:'
      ) {
        window.location.protocol = 'https'
      }
    

window.dataLayer = window.dataLayer || []
function gtag() {
dataLayer.push(arguments)
}
gtag('js', new Date())

gtag('config', 'G-GEK3VL33YR')


Requests	IP Address	Location	AS Autonomous System
34	104.18.20.82	Unknown	Unknown
2	34.208.8.157	Unknown	Unknown
2	104.17.214.66	Unknown	Unknown
2	104.17.25.14	Unknown	Unknown
2	162.247.243.39	Unknown	Unknown
2	104.17.24.14	Unknown	Unknown
2	18.173.205.118	Unknown	Unknown
2	157.240.0.35	Unknown	Unknown
2	65.8.131.43	Unknown	Unknown
2	216.239.32.36	Unknown	Unknown
148	58	-	-

Security Scan Report: linqapp.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History