CSP Data for: olx.co.za

# Time Frame Framing Control TLS Enforce Content Control Third JS Parties 'unsafe-inline' http / https / * data: Diffs Normalized Policy
0
2016-02-21 - 2016-04-24
True
False
True
0
True
True
True
0
default-src data: * 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self' app.optimizely.com; 
1
2016-04-25 - 2016-07-28
True
False
True
0
True
True
True
1
default-src data: * 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self' app.optimizely.com apps.facebook.com; 
2
2016-07-29 - 2016-09-29
True
False
True
0
True
True
True
1
default-src data: * 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self' fonts.googleapis.com app.optimizely.com apps.facebook.com; 
3
2016-10-01 - 2016-12-23
True
False
True
0
True
True
True
0
default-src data: * 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self' fonts.googleapis.com app.optimizely.com apps.facebook.com; 
4
2017-03-31 - 2017-05-15
True
False
True
0
True
True
True
0
default-src data: * 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self' fonts.googleapis.com app.optimizely.com apps.facebook.com; 
5
2017-06-25 - 2017-07-01
True
False
True
20
True
False
False
112
connect-src *.akamaized.net ads.olx.com.ar ads.olx.com.gh wss: 'self' *.nr-data.net api.mixpanel.com; default-src 'self'; font-src *.gstatic.com data: *.doubleclick.com *.googleadservices.com maxcdn.bootstrapcdn.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; frame-ancestors 'self' https://*.mod-tools.com:*; frame-src *.googleapis.com 'self' *.doubleclick.net *.poweredbyglobalcollect.com accounts.google.com *.olx.com.gh *.doubleclick.com *.googleadservices.com *.facebook.com *.letgo.com.ar *.google.com *.google-analytics.com *.olx.co.za *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.tpcsyndication.com www.digits.com *.olx.com.ar; img-src data: *.akamaized.net *.googleapis.com 'self' *.google.co.za *.doubleclick.net blob: *.nanigans.com *.doubleclick.com *.googleadservices.com *.facebook.com *.onap.io tracking.olx-st.com *.google.com *.google.com.gh *.google-analytics.com *.google.com.ar *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.gstatic.com *.googletagservices.com *.tpcsyndication.com; object-src *.doubleclick.com *.googleadservices.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.google-analytics.com *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; script-src connect.facebook.net *.googletagmanager.com graph.facebook.com *.googleapis.com 'self' cdn.digits.com *.doubleclick.net 'unsafe-eval' cdn.mxpnl.com *.doubleclick.com *.googleadservices.com *.vizury.com *.onap.io 'unsafe-inline' *.google.com *.google-analytics.com *.googleanalytics.com *.newrelic.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.nr-data.net *.tpcsyndication.com; style-src 'self' *.googleapis.com 'unsafe-inline' maxcdn.bootstrapcdn.com; 
6
2017-07-02 - 2017-07-03
True
False
True
20
True
False
False
2
connect-src *.akamaized.net ads.olx.com.ar ads.olx.com.gh wss: 'self' xchat.olx.com.gh/service/image xchat.olx.co.za/service/image *.nr-data.net api.mixpanel.com; default-src 'self'; font-src *.gstatic.com data: *.doubleclick.com *.googleadservices.com maxcdn.bootstrapcdn.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; frame-ancestors 'self' https://*.mod-tools.com:*; frame-src *.googleapis.com 'self' *.doubleclick.net *.poweredbyglobalcollect.com accounts.google.com *.olx.com.gh *.doubleclick.com *.googleadservices.com *.facebook.com *.letgo.com.ar *.google.com *.google-analytics.com *.olx.co.za *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.tpcsyndication.com www.digits.com *.olx.com.ar; img-src data: *.akamaized.net *.googleapis.com 'self' *.google.co.za *.doubleclick.net blob: *.nanigans.com *.doubleclick.com *.googleadservices.com *.facebook.com *.onap.io tracking.olx-st.com *.google.com *.google.com.gh *.google-analytics.com *.google.com.ar *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.gstatic.com *.googletagservices.com *.tpcsyndication.com; object-src *.doubleclick.com *.googleadservices.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.google-analytics.com *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; script-src connect.facebook.net *.googletagmanager.com graph.facebook.com *.googleapis.com 'self' cdn.digits.com *.doubleclick.net 'unsafe-eval' cdn.mxpnl.com *.doubleclick.com *.googleadservices.com *.vizury.com *.onap.io 'unsafe-inline' *.google.com *.google-analytics.com *.googleanalytics.com *.newrelic.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.nr-data.net *.tpcsyndication.com; style-src 'self' *.googleapis.com 'unsafe-inline' maxcdn.bootstrapcdn.com; 
7
2017-07-04 - 2017-07-04
True
False
True
21
True
False
False
2
connect-src *.akamaized.net ads.olx.com.ar ads.olx.com.gh wss: 'self' xchat.olx.com.gh/service/image xchat.olx.co.za/service/image *.nr-data.net api.mixpanel.com; default-src 'self'; font-src *.gstatic.com data: *.doubleclick.com *.googleadservices.com maxcdn.bootstrapcdn.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; frame-ancestors 'self' https://*.mod-tools.com:*; frame-src *.googleapis.com 'self' *.doubleclick.net *.poweredbyglobalcollect.com accounts.google.com *.olx.com.gh *.doubleclick.com *.googleadservices.com *.vizury.com *.facebook.com *.letgo.com.ar *.google.com *.google-analytics.com *.olx.co.za *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.tpcsyndication.com www.digits.com *.olx.com.ar; img-src data: *.akamaized.net *.googleapis.com 'self' *.google.co.za *.doubleclick.net blob: *.nanigans.com *.doubleclick.com *.googleadservices.com *.facebook.com *.onap.io tracking.olx-st.com *.google.com *.google.com.gh *.google-analytics.com *.google.com.ar *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.gstatic.com *.googletagservices.com *.tpcsyndication.com; object-src *.doubleclick.com *.googleadservices.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.google-analytics.com *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; script-src connect.facebook.net *.googletagmanager.com graph.facebook.com *.googleapis.com 'self' cdn.digits.com *.doubleclick.net 'unsafe-eval' cdn.mxpnl.com *.adroll.com *.doubleclick.com *.googleadservices.com *.vizury.com *.onap.io 'unsafe-inline' *.google.com *.google-analytics.com *.googleanalytics.com *.newrelic.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.nr-data.net *.tpcsyndication.com; style-src 'self' *.googleapis.com 'unsafe-inline' maxcdn.bootstrapcdn.com; 
8
2017-07-05 - 2017-07-07
True
False
True
21
True
False
False
1
connect-src *.akamaized.net ads.olx.com.ar ads.olx.com.gh wss: 'self' xchat.olx.com.gh/service/image xchat.olx.co.za/service/image *.nr-data.net api.mixpanel.com; font-src *.gstatic.com data: *.doubleclick.com *.googleadservices.com maxcdn.bootstrapcdn.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; frame-ancestors 'self' https://*.mod-tools.com:*; frame-src *.googleapis.com 'self' *.doubleclick.net *.poweredbyglobalcollect.com accounts.google.com *.olx.com.gh *.doubleclick.com *.googleadservices.com *.vizury.com *.facebook.com *.letgo.com.ar *.google.com *.google-analytics.com *.olx.co.za *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.tpcsyndication.com www.digits.com *.olx.com.ar; img-src data: *.akamaized.net *.googleapis.com 'self' *.google.co.za *.doubleclick.net blob: *.nanigans.com *.doubleclick.com *.googleadservices.com *.facebook.com *.onap.io tracking.olx-st.com *.google.com *.google.com.gh *.google-analytics.com *.google.com.ar *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.gstatic.com *.googletagservices.com *.tpcsyndication.com; object-src *.doubleclick.com *.googleadservices.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.google-analytics.com *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; script-src connect.facebook.net *.googletagmanager.com graph.facebook.com *.googleapis.com 'self' cdn.digits.com *.doubleclick.net 'unsafe-eval' cdn.mxpnl.com *.adroll.com *.doubleclick.com *.googleadservices.com *.vizury.com *.onap.io 'unsafe-inline' *.google.com *.google-analytics.com *.googleanalytics.com *.newrelic.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.nr-data.net *.tpcsyndication.com; style-src 'self' *.googleapis.com 'unsafe-inline' maxcdn.bootstrapcdn.com; 
9
2017-07-08 - 2017-07-10
True
False
True
21
True
False
False
1
connect-src *.akamaized.net ads.olx.com.ar ads.olx.com.gh wss: 'self' xchat.olx.com.gh/service/image xchat.olx.co.za/service/image *.nr-data.net api.mixpanel.com; default-src 'self'; font-src *.gstatic.com data: *.doubleclick.com *.googleadservices.com maxcdn.bootstrapcdn.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; frame-ancestors 'self' https://*.mod-tools.com:*; frame-src *.googleapis.com 'self' *.doubleclick.net *.poweredbyglobalcollect.com accounts.google.com *.olx.com.gh *.doubleclick.com *.googleadservices.com *.vizury.com *.facebook.com *.letgo.com.ar *.google.com *.google-analytics.com *.olx.co.za *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.tpcsyndication.com www.digits.com *.olx.com.ar; img-src data: *.akamaized.net *.googleapis.com 'self' *.google.co.za *.doubleclick.net blob: *.nanigans.com *.doubleclick.com *.googleadservices.com *.facebook.com *.onap.io tracking.olx-st.com *.google.com *.google.com.gh *.google-analytics.com *.google.com.ar *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.gstatic.com *.googletagservices.com *.tpcsyndication.com; object-src *.doubleclick.com *.googleadservices.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.google-analytics.com *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; script-src connect.facebook.net *.googletagmanager.com graph.facebook.com *.googleapis.com 'self' cdn.digits.com *.doubleclick.net 'unsafe-eval' cdn.mxpnl.com *.adroll.com *.doubleclick.com *.googleadservices.com *.vizury.com *.onap.io 'unsafe-inline' *.google.com *.google-analytics.com *.googleanalytics.com *.newrelic.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.nr-data.net *.tpcsyndication.com; style-src 'self' *.googleapis.com 'unsafe-inline' maxcdn.bootstrapcdn.com; 
10
2017-07-11 - 2017-08-13
True
False
True
21
True
False
False
1
connect-src *.akamaized.net ads.olx.com.ar ads.olx.com.gh wss: 'self' xchat.olx.com.gh/service/image xchat.olx.co.za/service/image *.nr-data.net api.mixpanel.com; default-src 'self'; font-src *.gstatic.com data: *.doubleclick.com *.googleadservices.com maxcdn.bootstrapcdn.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; frame-ancestors 'self' https://*.mod-tools.com:*; frame-src *.surveygizmo.com *.googleapis.com 'self' *.doubleclick.net *.poweredbyglobalcollect.com accounts.google.com *.olx.com.gh *.doubleclick.com *.googleadservices.com *.vizury.com *.facebook.com *.letgo.com.ar *.google.com *.google-analytics.com *.olx.co.za *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.tpcsyndication.com www.digits.com *.olx.com.ar; img-src data: *.akamaized.net *.googleapis.com 'self' *.google.co.za *.doubleclick.net blob: *.nanigans.com *.doubleclick.com *.googleadservices.com *.facebook.com *.onap.io tracking.olx-st.com *.google.com *.google.com.gh *.google-analytics.com *.google.com.ar *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.gstatic.com *.googletagservices.com *.tpcsyndication.com; object-src *.doubleclick.com *.googleadservices.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.google-analytics.com *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; script-src connect.facebook.net *.googletagmanager.com graph.facebook.com *.googleapis.com 'self' cdn.digits.com *.doubleclick.net 'unsafe-eval' cdn.mxpnl.com *.adroll.com *.doubleclick.com *.googleadservices.com *.vizury.com *.onap.io 'unsafe-inline' *.google.com *.google-analytics.com *.googleanalytics.com *.newrelic.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.nr-data.net *.tpcsyndication.com; style-src 'self' *.googleapis.com 'unsafe-inline' maxcdn.bootstrapcdn.com; 
11
2017-08-14 - 2017-08-22
True
False
True
22
True
False
False
5
connect-src *.doubleclick.com *.akamaized.net ads.olx.com.ar ads.olx.com.gh wss: 'self' xchat.olx.com.gh/service/image ads.olx.co.za *.doubleclick.net xchat.olx.co.za/service/image *.nr-data.net api.mixpanel.com; default-src 'self'; font-src *.gstatic.com data: *.doubleclick.com *.googleadservices.com maxcdn.bootstrapcdn.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; frame-ancestors 'self' https://*.mod-tools.com:*; frame-src *.surveygizmo.com *.googleapis.com 'self' *.doubleclick.net *.poweredbyglobalcollect.com accounts.google.com *.olx.com.gh *.doubleclick.com *.googleadservices.com *.vizury.com *.facebook.com *.letgo.com.ar *.google.com *.google-analytics.com *.olx.co.za *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.secured-by-ingenico.com *.tpcsyndication.com www.digits.com *.olx.com.ar; img-src data: *.akamaized.net *.googleapis.com 'self' *.google.co.za *.doubleclick.net blob: *.nanigans.com *.doubleclick.com *.googleadservices.com *.facebook.com *.onap.io tracking.olx-st.com *.google.com *.google.com.gh *.google-analytics.com *.google.com.ar *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.gstatic.com *.googletagservices.com *.tpcsyndication.com; object-src *.doubleclick.com *.googleadservices.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.google-analytics.com *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; script-src connect.facebook.net *.googletagmanager.com graph.facebook.com *.cedexis.com *.googleapis.com 'self' cdn.digits.com *.doubleclick.net 'unsafe-eval' cdn.mxpnl.com *.adroll.com *.doubleclick.com *.googleadservices.com *.vizury.com *.onap.io 'unsafe-inline' *.google.com *.google-analytics.com *.googleanalytics.com *.newrelic.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.nr-data.net *.tpcsyndication.com; style-src 'self' *.googleapis.com 'unsafe-inline' maxcdn.bootstrapcdn.com; 
12
2017-08-23 - 2017-08-27
True
False
True
22
True
False
False
1
connect-src *.doubleclick.com *.akamaized.net ads.olx.com.ar ads.olx.com.gh wss: 'self' xchat.olx.com.gh/service/image ads.olx.co.za *.doubleclick.net xchat.olx.co.za/service/image *.nr-data.net api.mixpanel.com; default-src 'self'; font-src *.gstatic.com data: *.doubleclick.com *.googleadservices.com maxcdn.bootstrapcdn.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; frame-ancestors 'self' https://*.mod-tools.com:*; frame-src *.surveygizmo.com *.googleapis.com 'self' *.doubleclick.net *.poweredbyglobalcollect.com accounts.google.com *.olx.com.gh *.doubleclick.com *.googleadservices.com *.vizury.com *.facebook.com *.letgo.com.ar *.google.com *.google-analytics.com *.olx.co.za *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.secured-by-ingenico.com *.tpcsyndication.com www.digits.com *.olx.com.ar; img-src data: *.akamaized.net *.googleapis.com 'self' *.google.co.za *.doubleclick.net blob: *.nanigans.com *.adroll.com *.doubleclick.com *.googleadservices.com *.facebook.com *.onap.io tracking.olx-st.com *.google.com *.google.com.gh *.google-analytics.com *.google.com.ar *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.gstatic.com *.googletagservices.com *.tpcsyndication.com; object-src *.doubleclick.com *.googleadservices.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.google-analytics.com *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; script-src connect.facebook.net *.googletagmanager.com graph.facebook.com *.cedexis.com *.googleapis.com 'self' cdn.digits.com *.doubleclick.net 'unsafe-eval' cdn.mxpnl.com *.adroll.com *.doubleclick.com *.googleadservices.com *.vizury.com *.onap.io 'unsafe-inline' *.google.com *.google-analytics.com *.googleanalytics.com *.newrelic.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.nr-data.net *.tpcsyndication.com; style-src 'self' *.googleapis.com 'unsafe-inline' maxcdn.bootstrapcdn.com; 
13
2017-08-28 - 2017-10-02
True
False
True
22
True
False
False
5
connect-src *.doubleclick.com *.akamaized.net ads.olx.com.ar ads.olx.com.gh wss: https://xchat.olx.com.gh/service/image https://xchat.olx.co.za/service/image 'self' ads.olx.co.za *.doubleclick.net *.nr-data.net api.mixpanel.com; default-src 'self'; font-src *.gstatic.com data: *.doubleclick.com *.googleadservices.com maxcdn.bootstrapcdn.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; frame-ancestors 'self' https://*.mod-tools.com:*; frame-src *.surveygizmo.com *.googleapis.com 'self' *.doubleclick.net *.poweredbyglobalcollect.com accounts.google.com *.olx.com.gh *.doubleclick.com *.googleadservices.com *.vizury.com *.facebook.com *.letgo.com.ar *.google.com *.google-analytics.com *.olx.co.za *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.secured-by-ingenico.com *.tpcsyndication.com www.digits.com *.olx.com.ar; img-src data: *.akamaized.net *.googleapis.com 'self' *.google.co.za *.doubleclick.net blob: *.nanigans.com *.adroll.com *.doubleclick.com *.googleadservices.com *.facebook.com *.onap.io tracking.olx-st.com *.google.com *.google.com.gh *.google-analytics.com *.google.com.ar img01.letgo.com.ar *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.gstatic.com *.googletagservices.com *.tpcsyndication.com; object-src *.doubleclick.com *.googleadservices.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.google-analytics.com *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; script-src connect.facebook.net *.googletagmanager.com graph.facebook.com *.cedexis.com *.googleapis.com 'self' cdn.digits.com *.doubleclick.net 'unsafe-eval' cdn.mxpnl.com *.adroll.com *.doubleclick.com *.googleadservices.com *.vizury.com *.onap.io 'unsafe-inline' *.google.com *.google-analytics.com *.googleanalytics.com *.newrelic.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.nr-data.net *.tpcsyndication.com; style-src 'self' *.googleapis.com 'unsafe-inline' maxcdn.bootstrapcdn.com; 
14
2017-10-03 - 2017-10-09
True
False
True
24
True
False
False
7
connect-src *.doubleclick.com *.akamaized.net ads.olx.com.ar ads.olx.com.gh wss: https://xchat.olx.com.gh/service/image https://xchat.olx.co.za/service/image 'self' *.optimizely.com ads.olx.co.za *.doubleclick.net *.nr-data.net api.mixpanel.com; font-src *.gstatic.com data: *.doubleclick.com *.googleadservices.com maxcdn.bootstrapcdn.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; frame-ancestors 'self' https://*.mod-tools.com:*; frame-src *.surveygizmo.com *.googleapis.com 'self' *.doubleclick.net *.poweredbyglobalcollect.com accounts.google.com *.olx.com.gh *.doubleclick.com *.gcsip.nl *.googleadservices.com *.vizury.com *.cardinalcommerce.com *.facebook.com *.letgo.com.ar *.google.com *.google-analytics.com *.olx.co.za *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.secured-by-ingenico.com *.tpcsyndication.com www.digits.com *.olx.com.ar; img-src data: *.akamaized.net *.googleapis.com 'self' *.google.co.za *.doubleclick.net blob: *.nanigans.com *.adroll.com *.doubleclick.com *.googleadservices.com *.facebook.com *.onap.io tracking.olx-st.com *.google.com *.google.com.gh *.google-analytics.com *.google.com.ar img01.letgo.com.ar *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.gstatic.com *.googletagservices.com *.tpcsyndication.com; object-src *.doubleclick.com *.googleadservices.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.google-analytics.com *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; script-src connect.facebook.net *.googletagmanager.com *.adnxs.com graph.facebook.com *.cedexis.com *.googleapis.com 'self' cdn.digits.com *.doubleclick.net 'unsafe-eval' cdn.mxpnl.com *.adroll.com *.doubleclick.com *.googleadservices.com *.vizury.com *.onap.io 'unsafe-inline' *.google.com *.smyte.com *.google-analytics.com *.googleanalytics.com *.newrelic.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.nr-data.net *.tpcsyndication.com; style-src maxcdn.bootstrapcdn.com *.googleapis.com 'self' 'unsafe-inline' *.google.com; 
15
2017-10-10 - 2017-10-17
True
False
True
24
True
False
False
8
connect-src *.doubleclick.com *.akamaized.net ads.olx.com.ar ads.olx.com.gh wss: https://xchat.olx.com.gh/service/image https://xchat.olx.co.za/service/image 'self' *.optimizely.com ads.olx.co.za *.doubleclick.net *.nr-data.net api.mixpanel.com; default-src 'self'; font-src *.gstatic.com data: *.doubleclick.com *.googleadservices.com maxcdn.bootstrapcdn.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; frame-ancestors 'self' https://*.mod-tools.com:*; frame-src *.surveygizmo.com *.citibank.com *.googleapis.com *.arcot.com 'self' *.doubleclick.net *.poweredbyglobalcollect.com accounts.google.com *.olx.com.gh *.doubleclick.com *.gcsip.nl *.googleadservices.com *.vizury.com *.cardinalcommerce.com *.facebook.com *.letgo.com.ar *.gcsip.com *.google.com *.touchtechpayments.com *.google-analytics.com *.olx.co.za *.standardchartered.com *.securecode.com *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.visa.com *.secured-by-ingenico.com *.tpcsyndication.com www.digits.com *.olx.com.ar; img-src data: *.akamaized.net *.googleapis.com 'self' *.google.co.za *.doubleclick.net blob: *.nanigans.com *.adroll.com *.doubleclick.com *.googleadservices.com *.facebook.com *.onap.io tracking.olx-st.com *.google.com *.google.com.gh *.google-analytics.com *.google.com.ar img01.letgo.com.ar *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.gstatic.com *.googletagservices.com *.tpcsyndication.com; object-src *.doubleclick.com *.googleadservices.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.google-analytics.com *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; script-src connect.facebook.net *.googletagmanager.com *.adnxs.com graph.facebook.com *.cedexis.com *.googleapis.com 'self' cdn.digits.com *.doubleclick.net 'unsafe-eval' cdn.mxpnl.com *.adroll.com *.doubleclick.com *.googleadservices.com *.vizury.com *.onap.io 'unsafe-inline' *.google.com *.smyte.com *.google-analytics.com *.googleanalytics.com *.newrelic.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.nr-data.net *.tpcsyndication.com; style-src maxcdn.bootstrapcdn.com *.googleapis.com 'self' 'unsafe-inline' *.google.com; 
16
2017-10-18 - 2017-10-31
True
False
True
25
True
False
False
5
connect-src *.doubleclick.com *.akamaized.net ads.olx.com.ar ads.olx.com.gh wss: https://xchat.olx.com.gh/service/image https://xchat.olx.co.za/service/image 'self' *.optimizely.com ads.olx.co.za *.doubleclick.net *.nr-data.net api.mixpanel.com; default-src 'self'; font-src *.gstatic.com data: *.doubleclick.com *.googleadservices.com maxcdn.bootstrapcdn.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; frame-ancestors 'self' https://*.mod-tools.com:*; frame-src *.surveygizmo.com *.citibank.com *.googleapis.com *.arcot.com 'self' *.doubleclick.net *.poweredbyglobalcollect.com accounts.google.com *.hotjar.com *.olx.com.gh *.doubleclick.com *.gcsip.nl *.googleadservices.com *.vizury.com *.cardinalcommerce.com *.facebook.com *.letgo.com.ar *.gcsip.com *.google.com *.touchtechpayments.com *.google-analytics.com *.olx.co.za *.standardchartered.com *.securecode.com *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.visa.com *.secured-by-ingenico.com *.tpcsyndication.com www.digits.com *.olx.com.ar; img-src data: *.akamaized.net *.adnxs.com *.googleapis.com *.rubiconproject.com 'self' *.google.co.za *.doubleclick.net blob: *.nanigans.com *.adroll.com *.doubleclick.com *.yahoo.com *.googleadservices.com *.facebook.com *.onap.io tracking.olx-st.com *.google.com *.google.com.gh *.google-analytics.com *.google.com.ar img01.letgo.com.ar *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.gstatic.com *.googletagservices.com *.tpcsyndication.com; object-src *.doubleclick.com *.googleadservices.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.google-analytics.com *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; script-src connect.facebook.net *.googletagmanager.com *.adnxs.com graph.facebook.com *.cedexis.com *.googleapis.com 'self' cdn.digits.com *.doubleclick.net 'unsafe-eval' cdn.mxpnl.com *.adroll.com *.hotjar.com *.doubleclick.com *.googleadservices.com *.vizury.com *.onap.io 'unsafe-inline' *.google.com *.smyte.com *.google-analytics.com *.googleanalytics.com *.newrelic.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.nr-data.net *.tpcsyndication.com; style-src maxcdn.bootstrapcdn.com *.googleapis.com 'self' 'unsafe-inline' *.google.com; 
17
2017-11-01 - 2017-11-30
True
False
True
25
True
False
False
4
connect-src *.doubleclick.com *.akamaized.net ads.olx.com.ar ads.olx.com.gh wss: https://xchat.olx.com.gh/service/image https://xchat.olx.co.za/service/image 'self' *.optimizely.com ads.olx.co.za *.doubleclick.net *.nr-data.net api.mixpanel.com *.hotjar.com; default-src 'self'; font-src *.gstatic.com data: *.doubleclick.com *.googleadservices.com maxcdn.bootstrapcdn.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com *.hotjar.com; frame-ancestors 'self' https://*.mod-tools.com:*; frame-src *.surveygizmo.com *.citibank.com *.googleapis.com *.arcot.com 'self' *.doubleclick.net *.poweredbyglobalcollect.com accounts.google.com *.hotjar.com *.olx.com.gh *.doubleclick.com *.gcsip.nl *.googleadservices.com *.vizury.com *.cardinalcommerce.com *.facebook.com *.letgo.com.ar *.gcsip.com *.google.com *.touchtechpayments.com *.google-analytics.com *.olx.co.za *.standardchartered.com *.securecode.com *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.visa.com *.secured-by-ingenico.com *.tpcsyndication.com www.digits.com *.olx.com.ar; img-src data: *.akamaized.net *.adnxs.com *.googleapis.com *.rubiconproject.com 'self' *.google.co.za *.doubleclick.net blob: *.nanigans.com *.adroll.com *.hotjar.com *.doubleclick.com *.yahoo.com *.googleadservices.com *.facebook.com *.onap.io tracking.olx-st.com *.google.com *.google.com.gh *.google-analytics.com *.google.com.ar img01.letgo.com.ar *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.gstatic.com *.googletagservices.com *.tpcsyndication.com; object-src *.doubleclick.com *.googleadservices.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.google-analytics.com *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; script-src connect.facebook.net *.googletagmanager.com *.adnxs.com graph.facebook.com *.cedexis.com *.googleapis.com 'self' cdn.digits.com *.doubleclick.net 'unsafe-eval' cdn.mxpnl.com *.adroll.com *.hotjar.com *.doubleclick.com *.googleadservices.com *.vizury.com *.onap.io 'unsafe-inline' *.google.com *.smyte.com *.google-analytics.com *.googleanalytics.com *.newrelic.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.nr-data.net *.tpcsyndication.com; style-src maxcdn.bootstrapcdn.com *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
18
2017-12-01 - 2017-12-22
True
False
True
25
True
False
False
1
connect-src *.doubleclick.com *.akamaized.net ads.olx.com.ar ads.olx.com.gh wss: https://xchat.olx.com.gh/service/image https://xchat.olx.co.za/service/image *.onap.io 'self' *.optimizely.com ads.olx.co.za *.doubleclick.net *.nr-data.net api.mixpanel.com *.hotjar.com; default-src 'self'; font-src *.gstatic.com data: *.doubleclick.com *.googleadservices.com maxcdn.bootstrapcdn.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com *.hotjar.com; frame-ancestors 'self' https://*.mod-tools.com:*; frame-src *.surveygizmo.com *.citibank.com *.googleapis.com *.arcot.com 'self' *.doubleclick.net *.poweredbyglobalcollect.com accounts.google.com *.hotjar.com *.olx.com.gh *.doubleclick.com *.gcsip.nl *.googleadservices.com *.vizury.com *.cardinalcommerce.com *.facebook.com *.letgo.com.ar *.gcsip.com *.google.com *.touchtechpayments.com *.google-analytics.com *.olx.co.za *.standardchartered.com *.securecode.com *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.visa.com *.secured-by-ingenico.com *.tpcsyndication.com www.digits.com *.olx.com.ar; img-src data: *.akamaized.net *.adnxs.com *.googleapis.com *.rubiconproject.com 'self' *.google.co.za *.doubleclick.net blob: *.nanigans.com *.adroll.com *.hotjar.com *.doubleclick.com *.yahoo.com *.googleadservices.com *.facebook.com *.onap.io tracking.olx-st.com *.google.com *.google.com.gh *.google-analytics.com *.google.com.ar img01.letgo.com.ar *.googleanalytics.com *.googlevideo.com *.googlesyndication.com *.gstatic.com *.googletagservices.com *.tpcsyndication.com; object-src *.doubleclick.com *.googleadservices.com *.googletagservices.com *.googleapis.com 'self' *.googleanalytics.com *.doubleclick.net *.google-analytics.com *.googlevideo.com *.google.com *.tpcsyndication.com *.googlesyndication.com; script-src connect.facebook.net *.googletagmanager.com *.adnxs.com graph.facebook.com *.cedexis.com *.googleapis.com 'self' cdn.digits.com *.doubleclick.net 'unsafe-eval' cdn.mxpnl.com *.adroll.com *.hotjar.com *.doubleclick.com *.googleadservices.com *.vizury.com *.onap.io 'unsafe-inline' *.google.com *.smyte.com *.google-analytics.com *.googleanalytics.com *.newrelic.com *.googlevideo.com *.googlesyndication.com *.googletagservices.com *.nr-data.net *.tpcsyndication.com; style-src maxcdn.bootstrapcdn.com *.googleapis.com 'self' 'unsafe-inline' *.google.com *.hotjar.com; 
19
2018-01-16 - 2018-07-08
True
False
False
0
False
False
False
139
frame-ancestors 'self' https://*.mod-tools.com:*; 
20
2018-07-09 - 2018-11-07
True
False
False
0
False
False
False
1
frame-ancestors 'self'; 
21
2018-11-08 - 2018-12-17
True
False
False
0
False
False
False
1
frame-ancestors 'self' https://*.cdn.ampproject.org; 
22
2018-12-18 - END
True
False
False
0
False
False
False
1
frame-ancestors 'self';