Schema.org attribution [warning]! Schema.org attribution is incomplete or relies only on publisher/fallback evidence.INFOSchema.org attributionINFOChecking structured data for author, creator, and publisher contributorsWARNCheck named Schema.org author count actual=0 expected="> 0" authorCount=0 publisherCount=2 namedContributors=0 authors=[] publishers=[{"role":"publisher","id":"https://www.greendot.com/#identity","sameAs":[],"format":"json-ld","mergedName":false},{"role":"publisher","id":"https://www.greendot.com/#identity","sameAs":[],"format":"json-ld","mergedName":false}] formats=["json-ld"]WARNSchema.org attribution is incomplete or fallback-only authorCount=0 publisherCount=2 authors=[] publishers=[{"role":"publisher","id":"https://www.greendot.com/#identity","sameAs":[],"format":"json-ld","mergedName":false},{"role":"publisher","id":"https://www.greendot.com/#identity","sameAs":[],"format":"json-ld","mergedName":false}]Author identity quality [fail]! No named author or publisher identity could be extracted.INFOAuthor identity qualityINFOChecking contributors for stable identity signalsFAILCheck identified contributor count actual=0 expected="> 0" namedContributors=0 identifiedContributors=[] unidentifiedContributors=[{"role":"publisher","id":"https://www.greendot.com/#identity","sameAs":[],"format":"json-ld","mergedName":false},{"role":"publisher","id":"https://www.greendot.com/#identity","sameAs":[],"format":"json-ld","mergedName":false}]FAILNo named contributor identity could be extracted

Validate CSP frame-ancestors [fail]! frame-ancestors contains invalid source expressions: *.dv.socure.io, google.com, *.adobedc.net.INFOValidate CSP frame-ancestorsINFORead CSP frame-ancestors signals enforcingHeaderPresent=true reportOnlyHeaderPresent=false metaFrameAncestors=false policyCount=1 duplicateDirectives=[]FAILCompare effective frame-ancestors directive actual={"values":["'self'","*.dv.socure.io","google.com","*.adobedc.net","https://*.greendot.com","https://*.go2bank.com","https://*.go2financial.com","https://*.walmartmoneycard.com","https://*.chirpwhitelabel.com"],"mode":"malformed","valid":false,"restrictive":false,"broadSources":[]} expected="valid restrictive enforcing frame-ancestors" issue="frame-ancestors contains invalid source expressions: *.dv.socure.io, google.com, *.adobedc.net."FAILframe-ancestors contains invalid source expressions: *.dv.socure.io, google.com, *.adobedc.net.Validate X-Frame-Options [fail]! No valid X-Frame-Options fallback is present.INFOValidate X-Frame-OptionsINFORead X-Frame-Options fallback value="missing" parsedValues=[] normalizedValues=[]FAILCompare X-Frame-Options value actual="missing" expected="DENY or SAMEORIGIN" valid=false obsoleteAllowFrom=false duplicateOrConflicting=false issue="No valid X-Frame-Options fallback is present."FAILNo valid X-Frame-Options fallback is present.Review observed browser responses [warning]! One or more same-origin HTML documents observed by Chrome did not emit valid frame protection.INFOReview observed browser responsesINFOSample Chrome-observed same-origin responses observedResponseCount=63 sameOriginCount=41 htmlDocumentCount=1WARNCompare observed HTML frame protection actual={"missingOrInvalidFrameProtectionCount":1,"broadFrameAncestorsCount":0,"affected":[{"url":"https://www.greendot.com/","status":200,"resourceType":"document","contentType":"text/html;charset=utf-8","contentSecurityPolicy":"default-src 'self' data: *.dv.socure.io *.adobedc.net google.com *.googletagmanager.com *.trustarc.com *.mpsnare.iesnare.com https://mpsnare.iesnare.com https://*.extole.io https://*.xtlo.net; object-src 'self' *.googletagmanager.com *.trustarc.com; child-src 'self' ujet.co google.com *.adobedc.net","contentSecurityPolicyReportOnly":null}]} expected="0 missing/invalid or broad same-origin HTML responses" issue="One or more same-origin HTML documents observed by Chrome did not emit valid frame protection."WARNOne or more same-origin HTML documents observed by Chrome did not emit valid frame protection.

Evaluate script execution [fail]! script-src allows dangerous script schemes: blob:.INFOEvaluate script executionINFOInspect effective script directive effectiveDirective="script-src" sources=["'self'","https://secure.walmartmoneycard.com","'unsafe-inline'","'unsafe-eval'","google.com","https://first.iovation.com/*","https://www.clarity.ms/*","https://*.gdctrking.com","https://*.clarity.ms/*","https://*.clarity.ms","*.clarity.ms","*.licdn.com","*.adobedc.net","*.dv.socure.io","*.truste.com","*.consent.trustarc.com","*.googletagmanager.com","*.trustarc.com","*.adnxs.com","*.tags.srv.stackadapt.com","*.srv.stackadapt.com","*.east.srv.stackadapt.com","*.uw.srv.stackadapt.com","*.eu.srv.stackadapt.com","*.qvdt3feo.com","*.stackadapt.com","*.tags.srv.stackadapt.com","*.redditstatic.com","*.forter.com","tags.stackadapt.com","https://mpsnare.iesnare.com","https://share.walmartmoneycard.com","*.go2bank.com","*.go2financial.com","*.go2bankonline.com","*.fuelcdn.com","*.exacttarget.com","*.adobe.com","*.mpsnare.iesnare.com","*.tvsquared.com","ujet.co","*.ujet.co","google-analytics.com","*.google-analytics.com","trk.clinch.co","*.trk.clinch.co","cdn.clinch.co","*.clinch.co","kampyle.com","*.kampyle.com","*.googleapis.com","*.gstatic.com","*.pxf.io","idsync.rlcdn.com","logs-01.loggly.com","tapestry.tapad.com","ojrq.net","*.impactradius-event.com","*.salesforceliveagent.com","*.hypemarks.com","websdk.appsflyer.com","*.adsrvr.org","*.xg4ken.com","*.google.com","*.doubleclick.net","*.adobecqms.net","*.googleadservices.com","*.greendot.com","greendot.com","*.googletagmanager.com","googletagmanager.com","*.facebook.com","facebook.com","*.bing.com","s.ytimg.com","connect.facebook.net","assets.adobedtm.com","www.youtube.com","storify.com","player.vimeo.com","*.livefyre.com","*.everesttech.net","*.demdex.net","*.omtrdc.net","https://*.extole.io","https://*.xtlo.net","https://*.decibelinsight.net","https://*.decibel.com","blob:","https://api.cloudsponge.com","analytics.tiktok.com","https://cdnjs.cloudflare.com","https://acdn.adnxs.com/dmp/up/pixie.js","https://ib.adnxs.com/pixie"]FAILCompare script execution posture actual={"hasNonce":false,"hasHash":false,"hasStrictDynamic":false,"hasUnsafeInline":true,"hasUnsafeEval":true,"hasWildcardHost":true,"hasBroadScheme":false,"dangerousSchemes":["blob:"]} expected="constrained script sources without unsafe execution allowances" issue="script-src allows dangerous script schemes: blob:."FAILscript-src allows dangerous script schemes: blob:.Review hardening directives [warning]! CSP is missing recommended hardening directives: base-uri.INFOReview hardening directivesINFOInspect CSP hardening directives objectSrc=["'self'","*.googletagmanager.com","*.trustarc.com"] frameAncestors=["'self'","*.dv.socure.io","google.com","*.adobedc.net","https://*.greendot.com","https://*.go2bank.com","https://*.go2financial.com","https://*.walmartmoneycard.com","https://*.chirpwhitelabel.com"] formCount=0WARNCompare recommended hardening coverage actual=["base-uri"] expected="no missing object-src/base-uri/form-action requirements" issue="CSP is missing recommended hardening directives: base-uri."WARNCSP is missing recommended hardening directives: base-uri.Review CSP reporting [warning]! CSP does not define a reporting endpoint.INFOReview CSP reportingINFOInspect CSP reporting directives reportOnlyHeaderPresent=false reportOnlyDirectives=[]WARNCompare violation reporting configuration actual="no reporting endpoint" expected="report-to or report-uri present" issue="CSP does not define a reporting endpoint."WARNCSP does not define a reporting endpoint.