Demo Company
Page 11, fixed: the same tracker, under a Content Security Policy
HTTP Requests
/resources-keylog-fixed.html/favicon.ico/assets/styles/main.csshttps://www.someothercompany.com/assets/scripts/tracker.jshttps://www.someothercompany.com/collect (blocked by the policy)