upwork.com

1 evidence signal

TextAI-powered

Frameworks & Languages3

Nuxt.js

JavaScript frameworks

3 evidence signals

HTML<div id="__nuxt"

JS Global$nuxt → object

DOMnuxt-root

Vue.jsv2.7.20

JavaScript frameworks

2 evidence signals

HTMLdata-v-37bbdfae

JS GlobalVue → function(v2.7.20)

Node.js

Programming languages

1 evidence signal

HTMLimplied by Nuxt.js

Analytics & Marketing8

Google Tag Manager

Tag managers

3 evidence signals

HTMLgoogletagmanager.com/gtm.js

JS Globalgoogle_tag_manager → object

JS GlobaldataLayer → object

HubSpot

Marketing automation

1 evidence signal

dnsDKIM selector: hs1

MailChimp

Marketing automation

1 evidence signal

dnsDKIM selector: k1

Google Workspace

1 evidence signal

dnsMX: aspmx.l.google.com

Mandrill

95%

1 evidence signal

dnsSPF includes mandrillapp.com

Google Analytics

Analytics

1 evidence signal

Scripthttps://www.googletagmanager.com/gtag/js?id=DC-9982405&cx=c&gtm=4e6241

VWO

Analytics

2 evidence signals

JS GlobalVWO → object

JS Global_vwo_code → object

Qualtrics

Surveys

7 evidence signals

Script

https://siteintercept.qualtrics.com/dxjsmodule/11.2ab9dc65a5d29ec96d39.chunk.js?Q_CLIENTVERSION=2.42.0&Q_CLIENTTYPE=web&Q_BRANDID=www.upwork.com

Script

https://siteintercept.qualtrics.com/dxjsmodule/7.50480dd86d8845f011b6.chunk.js?Q_CLIENTVERSION=2.42.0&Q_CLIENTTYPE=web&Q_BRANDID=www.upwork.com

Script

https://siteintercept.qualtrics.com/dxjsmodule/5.f5f2411a93fcbab7a50c.chunk.js?Q_CLIENTVERSION=2.42.0&Q_CLIENTTYPE=web&Q_BRANDID=upwork

Script

https://siteintercept.qualtrics.com/dxjsmodule/1.73a0f93520cd5dac6c1c.chunk.js?Q_CLIENTVERSION=2.42.0&Q_CLIENTTYPE=web&Q_BRANDID=upwork

Script

https://siteintercept.qualtrics.com/dxjsmodule/19.483b428c8fee936c2792.chunk.js?Q_CLIENTVERSION=2.42.0&Q_CLIENTTYPE=web&Q_BRANDID=upwork

Scripthttps://zn0izjiulta2j2t4o-upwork.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_0IzJIULtA2j2T4O

Scripthttps://siteintercept.qualtrics.com/dxjsmodule/CoreModule.js?Q_CLIENTVERSION=2.42.0&Q_CLIENTTYPE=web&Q_BRANDID=upwork

Infrastructure & Security11

Cloudflare

CDN

3 evidence signals

Header9cb13cab4d6e2338-SJC

Headercloudflare: cloudflare

Cookie__cf_bm

Forter

3 evidence signals

CookieforterToken

Scripthttps://4c4cc75a16ed.cdn4.forter.com/sn/4c4cc75a16ed/script.js

JS Globalftr__startScriptLoad → number

Cloudflare DNS

PaaS

1 evidence signal

dnsNS: jim.ns.cloudflare.com

OneTrust

Cookie compliance

3 evidence signals

Scripthttps://cdn.cookielaw.org/consent/beb279fb-8702-46ec-a677-6f14e3828966/otSDKStub.js

Envoy

Reverse proxies

1 evidence signal

Header316

HSTS

1 evidence signal

Headermax-age=31536000; includeSubDomains; preload

Amazon S3

CDN

1 evidence signal

Header

s3[^ ]*\.amazonaws\.com: base-uri 'self';default-src 'self' *.upwork.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' static.ads-twitter.com ep2.adtrafficquality.google bat.bing.com appleid.cdn-apple.com *.cityrobotflower.com d34r8q7sht0t9k.cloudfront.net dlthst9q2beh8.cloudfront.net cdn.cookielaw.org *.g.doubleclick.net connect.facebook.net *.forter.com accounts.google.com www.google.com/recaptcha/ storage.googleapis.com/workbox-cdn/ pagead2.googlesyndication.com www.googletagmanager.com www.gstatic.com/recaptcha/ mpsnare.iesnare.com utt.impactcdn.com d.impactradius-event.com repo.incognia.com first.iovation.com cdn.jsdelivr.net/npm/workbox-cdn@5.1.4/ app.koah.ai snap.licdn.com *.paypal.com cdn.pdst.fm *.qualtrics.com a.quora.com www.redditstatic.com fast.ssqt.io assets.static-upwork.com analytics.tiktok.com *.upsellit.com *.upwork.com w.usabilla.com player.vimeo.com vimeo.com:*/api/ dev.visualwebsiteoptimizer.com www.youtube.com:*;script-src-attr 'unsafe-inline' 'report-sample';font-src 'self' data: fonts.gstatic.com *.upwork.com;style-src 'self' 'unsafe-inline' 'report-sample' accounts.google.com/gsi/ *.upwork.com;img-src blob: data: https: *;worker-src 'self' https: blob:;manifest-src 'self' *.upwork.com;object-src 'none';frame-src 'self' blob: data: https: *;connect-src 'self' ep1.adtrafficquality.google upwork-usw2-prod-agora-file-storage.s3.us-west-2.amazonaws.com:* beyondwickedmapping.org bat.bing.com bat.bing.net payments.braintree-api.com *.braintreegateway.com obs.cityrobotflower.com d2o5idwacg3gyw.cloudfront.net:* d6rak4b14t5gp.cloudfront.net:* d6wfl40rgh70w.cloudfront.net db7q4jg5rkhk8.cloudfront.net *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.za *.google.co.zw *.google.com.af *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bo *.google.com.br *.google.com.co *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.gh *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.mm *.google.com.mx *.google.com.my *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sg *.google.com.sv *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vn cdn.cookielaw.org *.doubleclick.net:* www.facebook.com featureassets.org:* *.forter.com wss://*.forter.com *.google-analytics.com *.google.ae *.google.al *.google.am *.google.at *.google.az *.google.ba *.google.be *.google.bg *.google.bj *.google.ca *.google.ch *.google.ci *.google.cl *.google.cm *.analytics.google.com accounts.google.com analytics.google.com https://google.com www.google.com/pagead/ www.google.com:* *.google.cz *.google.de *.google.dk *.google.dz *.google.ee *.google.es *.google.fi *.google.fr *.google.ge *.google.gr *.google.hn *.google.hr *.google.hu *.google.ie *.google.iq *.google.it *.google.jo *.google.kz *.google.la *.google.lk *.google.lt *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.mu *.google.nl *.google.no *.google.pl *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.rw *.google.se *.google.si *.google.sk *.google.so *.google.tn *.google.tt www.googleadservices.com pagead2.googlesyndication.com *.googletagmanager.com csi.gstatic.com *.icg-in.com wss://conn-check.icg-in.com *.icg-in.info wss://conn-check.icg-in.info wss://mpsnare.iesnare.com d.impct.site app.koah.ai px.ads.linkedin.com www.loom.com *.onetrust.com *.paypal.com *.podscribe.com prodregistryv2.org upwork.pxf.io *.qualtrics.com q.quora.com *.reddit.com:* www.redditstatic.com app.referralsaasquatch.com siteperformancetest.net wtp.siteperformancetest.net pixels.spotify.com api.stackexchange.com analytics.tiktok.com analytics-ipv6.tiktokw.us *.upwork.com wss://tl.upwork.com vimeo.com:*/api/ dev.visualwebsiteoptimizer.com;frame-ancestors 'self' *.upwork.com;form-action 'self' www.facebook.com/tr/ *.qualtrics.com *.upwork.com;media-src blob: data: https: *;report-to upwork-csp-endpoint;report-uri /nx/csp-reports/v1/Brontes;

Google Sign-in

Authentication

Cloudflare Bot Management

1 evidence signal

Scripthttps://accounts.google.com/gsi/client

1 evidence signal

Cookie__cf_bm

TruValidate

2 evidence signals

Script

https://mpsnare.iesnare.com/general5/wdp.js?loaderVer=5.2.2&compat=false&tp=true&tp_split=false&fp_static=true&fp_dyn=true&flash=false

Scripthttps://mpsnare.iesnare.com/5.11.0/logo.js

Amazon Web Services

PaaS

50%

1 evidence signal

HTMLimplied by Amazon S3

Libraries & Utilities5

HTTP/3

Miscellaneous

1 evidence signal

Headerh3: h3=":443"; ma=86400

Webpack

Miscellaneous

1 evidence signal

JS GlobalwebpackJsonp → object

core-js

JavaScript libraries

1 evidence signal

JS Global__core-js_shared__ → object

llms.txt

AI Policy & Governance

1 evidence signal

HTML/llms.txt

FingerprintJS

JavaScript libraries