SSL Verification Bypassed
The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.
Reason:
Hostname Mismatch - certificate is issued for www.wellreceived.com, not for 213.202.227.35.bc.googleusercontent.com
Open
Cached
·
just now
19
Headers
Detected Technologies from Headers
AOS (Animate On Scroll)
Amazon S3
Microsoft Advertising
ChatSupport
Facebook
Google AdSense
Google Analytics
Google Cloud Storage
Google Conversion Tracking
Google DoubleClick
Google Fonts
Google Hosted Libraries
Google Search
Google Static File Front End
Google Tag Manager
LinkedIn
Active incidents
Microsoft Clarity
Sentry
Smartlook
Tapfiliate
TikTok
Trustpilot
unpkg
YouTube
Zapier
Google Cloud
Amazon S3
Microsoft Advertising
ChatSupport
Facebook
Google AdSense
Google Analytics
Google Cloud Storage
Google DoubleClick
Google Fonts
Google Hosted Libraries
Google Search
Google Static File Front End
Google Tag Manager
LinkedIn
Active incidents
Microsoft Clarity
Sentry
Smartlook
Tapfiliate
TikTok
Trustpilot
unpkg
YouTube
Zapier
Google Cloud
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
No performance headers found
Caching Headers
Expires
Thu, 01 Jan 1970 00:00:00 GMT
Last-Modified
Wed, 01 Apr 2026 15:36:30 GMT
expires: Thu, 01 Jan 1970 00:00:00 GMT last-modified: Wed, 01 Apr 2026 15:36:30 GMT
Content Headers
Content-Type
text/html;charset=utf-8
content-type: text/html;charset=utf-8
CORS Headers
Access-Control-Allow-Headers
Origin, Content-Type, Accept
Access-Control-Allow-Methods
GET
Access-Control-Allow-Origin
https://www.wellreceived.com
access-control-allow-headers: Origin, Content-Type, Accept access-control-allow-methods: GET access-control-allow-origin: https://www.wellreceived.com
Cookies Headers
Other Headers
Alt-Svc
h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Date
Wed, 01 Apr 2026 15:36:31 GMT
Reflected-Xss
0
Resp-Time
1775057790992
Via
1.1 google
X-Permitted-Cross-Domain-Policies
none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 date: Wed, 01 Apr 2026 15:36:31 GMT reflected-xss: 0 resp-time: 1775057790992 via: 1.1 google x-permitted-cross-domain-policies: none
Recommendations
Enable compression (gzip/brotli) to improve performance
Add Cache-Control header to optimize caching