Open
Cached
·
just now
16
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=63072000; includeSubDomains; preload
Content-Security-Policy
Weak
frame-ancestors
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Significantly strengthen CSP directives
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
2 headers
Connection
Performance
close
Vary
Performance
Origin
Caching Headers
3 headers
Cache-Control
Caching
no-cache, no-store, must-revalidate
Expires
Caching
0
Pragma
Caching
no-cache
Content Headers
2 headers
Content-Length
Content
250607
Content-Type
Content
application/xml; charset=UTF-8
Server Headers
1 headers
Server
Server
UploadServer
CORS Headers
0 headers
No CORS headers found
Cookies Headers
0 headers
No cookies headers found
Other Headers
5 headers
Alt-Svc
Other
h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Content-Security-Policy-Report-Only
Other
default-src 'self' https://browser-intake-us5-datadoghq.com https://storage.googleapis.com; child-src 'self' blob:; style-src 'self' 'unsafe-inline' https://cdn.eztexting.com https://fonts.googleapis.com https://fast.appcues.com; img-src * data: blob:; font-src 'self' data: https://static2.sharepointonline.com https://www.slant.co https://fonts.gstatic.com https://cdn.eztexting.com; script-src 'self' 'unsafe-inline' https://www.clarity.ms https://storage.googleapis.com https://service.force.com https://www.googletagmanager.com https://cdn.amplitude.com https://cdn.eztexting.com 'unsafe-eval'; media-src 'self' https://www.callfire.com https://cdn.eztexting.com https://callfire-media-prod.s3.amazonaws.com; script-src-elem 'self' 'unsafe-inline' https://api.ipify.org https://tracking.g2crowd.com https://www.clarity.ms https://perfalytics.com https://lex.33across.com/ https://*.doubleclick.net https://static.lightning.force.com https://eztexting.force.com https://*.salesforceliveagent.com https://callfire.my.salesforce.com https://www.doubleclick.net https://service.force.com https://callfire.my.salesforce.com https://cdn.eztexting.com https://www.shutterstock.com/create/integration.js https://connect.facebook.net/en_US/sdk.js https://www.google.com/recaptcha/api.js https://www.gstatic.com https://www.googletagmanager.com https://storage.googleapis.com https://storage.googleapis.com/ctcm/ctcm_v.1.5.1.min.js https://www.googleadservices.com https://a.quora.com https://s.yimg.com https://ct.capterra.com https://bat.bing.com https://static.ads-twitter.com https://s.adroll.com https://d.adroll.com https://snap.licdn.com https://fast.appcues.com https://dev.visualwebsiteoptimizer.com https://ajax.googleapis.com; frame-src 'self' https://zapier.com https://dev.visualwebsiteoptimizer.com https://service.force.com https://callfire.my.salesforce.com https://4354332.fls.doubleclick.net https://www.google.com/ https://www.googletagmanager.com/ https://td.doubleclick.net/ https://x.adroll.com/ https://businesscom.go2cloud.org https://www.shutterstock.com/; frame-ancestors 'self' https://*.hubspot.com https://srv.callfire.com; manifest-src 'self' https://cdn.eztexting.com; connect-src 'self' ws: https://api.appcues.net wss://api.appcues.net https://*.clarity.ms https://*.doubleclick.net https://api.perfalytics.com https://browser-intake-us5-datadoghq.com https://*.datadoghq.com https://api.shutterstock.com https://srv.callfire.com https://www.google.com https://boxy.callfire.com https://i.eztexting.com https://widgy-lb.prd.cfire.io https://prompty.callfire.com https://app.eztexting.com https://spa.eztexting.com https://www.googletagmanager.com https://www.google-analytics.com https://s.yimg.com https://px.ads.linkedin.com https://srv.callfire.com https://dev.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://firebaseinstallations.googleapis.com https://fcmregistrations.googleapis.com https://eztexting.force.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.eztexting.com https://eztxt.s3.amazonaws.com/ https://api2.amplitude.com/ https://www.callfire.com/ https://connect.facebook.net/ https://fast.appcues.com https://www.gstatic.com https://storage.googleapis.com https://*.shutterstock.com https://ad.doubleclick.net; style-src-elem 'self' 'unsafe-inline' https://cdn.zapier.com https://fast.appcues.com https://fonts.googleapis.com https://www.shutterstock.com https://cdn.eztexting.com https://callfire.my.salesforce.com https://service.force.com https://eztexting.force.com; worker-src 'self' blob:;
Date
Other
Fri, 02 Jan 2026 21:38:21 GMT
X-Goog-Metageneration
Other
2
X-Guploader-Uploadid
Other
AHVrFxMsTWfQWbxzWkMmRmKRti6i4JkCYKgCTwMooZGX6rS7LCRDhhka6hv_suHSNRwvZxUp
Recommendations
Enable compression (gzip/brotli) to improve performance