SSL Verification Bypassed
The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.
Reason:
Unknown Certificate Authority - the server's certificate is not trusted
Open
Cached
·
just now
18
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Good
default-src; script-src; style-src; +7 more
default-src 'self' p11.techlab-cdn.com;script-src 'self' 'unsafe-inline' *.cdw.com *.cdw.ca *.richrelevance.com *.qualtrics.com *.optimizely.com *.needle.com *.appspot.com *.facebook.net *.googleadservices.com *.doubleclick.net *.google-analytics.com *.googleapis.com *.akamaihd.net *.google.com *.justuno.com *.demdex.net *.d41.co *.cxense.com pactsafe.io *.webcollage.net *.googletagmanager.com *.googlesyndication.com *.googletagservices.com *.ytimg.com *.youtube.com *.easy2.com *.go-mpulse.net *.linkedin.com *.cloudfront.net *.bluecore.com blob: data.g2.com *.g2crowd.com *.omtrdc.net *.spexlive.net *.gstatic.com *.turnto.com *.licdn.com *.hs-scripts.com *.hsleadflows.net *.hs-banner.com *.hsforms.net *.hsadspixel.net *.hubapi.com *.syndigo.com *.syndigo.cloud *.hsforms.com *.hubspot-forms-static-embed.s3.amazonaws.com *.hubspot.com accessibilityserver.org *.userway.org *.tiqcdn.com *.tealiumiq.com *.adroll.com *.hs-analytics.net js.usemessages.com *.hscollectedforms.net *.redditstatic.com *.reddit.com *.scene7.com *.vidyard.com *.vimeo.com *.hp.com *.etilize.com *.1worldsync.com *.quantserve.com *.quantcount.com *.spexaccess.net *.onetrust.com *.oribi.io *.cookielaw.org *.stackadapt.com *.administrateweblink.com *.stripe.com *.pactsafe.io *.sketchfab.com *.fiservapps.com sierra.chat *.algorecs.com *.officeperceptioninstinct.com *.oktapreview.com *.okta.com *.jst.ai *.onelink-edge.com justone.ai *.adobedtm.com *.mktoresp.com *.mktoapi.com *.mktoweb.com *.mktoedge.com *.adobedc.net *.marketo.net *.adoberesources.net p11.techlab-cdn.com;style-src 'self' 'unsafe-inline' *.cdw.com *.cdw.ca *.needle.com *.googleapis.com *.justuno.com *.webcollage.net *.easy2.com *.amazonaws.com *.cloudfront.net blob: *.typekit.net *.omtrdc.net *.spexlive.net *.turnto.com *.syndigo.com *.syndigo.cloud *.scene7.com *.etilize.com *.1worldsync.com *.spexaccess.net *.stackadapt.com *.administrateweblink.com *.stripe.com *.sketchfab.com sierra.chat *.adobedtm.com;img-src 'self' *.cdw.com *.cdw.ca *.qualtrics.com *.optimizely.com *.needle.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.akamaihd.net *.google.com *.justuno.com *.demdex.net *.cxense.com *.webcollage.net *.googletagmanager.com *.googletagservices.com *.ytimg.com *.youtube.com *.easy2.com *.amazonaws.com *.linkedin.com *.facebook.com *.cloudfront.net *.adobecqms.net *.everesttech.net *.bluecore.com cdn.optimizely.com data: *.omtrdc.net *.spexlive.net *.windows.net *.turnto.com *.edgecastcdn.net *.licdn.com *.syndigo.com *.syndigo.cloud *.hsforms.com *.hubspot.com *.userway.org *.tiqcdn.com *.tealiumiq.com *.adroll.com *.redditstatic.com *.reddit.com *.scene7.com *.vidyard.com *.vimeocdn.com *.etilize.com *.1worldsync.com *.quantserve.com *.quantcount.com *.spexaccess.net *.oribi.io *.cookielaw.org *.stackadapt.com *.pactsafe.io *.administratehq.com *.sketchfab.com sierra.chat *.officeperceptioninstinct.com *.oktapreview.com *.okta.com *.jst.ai *.hubspotusercontent-na1.net justone.ai *.adobedtm.com *.mktoedge.com;frame-src 'self' *.cdw.com *.cdw.ca *.qualtrics.com *.needle.com *.doubleclick.net *.google.com *.justuno.com *.demdex.net *.cxense.com *.webcollage.net *.googletagmanager.com *.googletagservices.com *.youtube.com *.easy2.com *.facebook.com *.cloudfront.net *.cdwemail.com *.kingston.com *.spexlive.net *.swcontentsyndication.com *.exacttarget.com *.exct.net *.simplecast.com *.syndigo.com *.syndigo.cloud *.hsforms.com *.userway.org *.scene7.com *.vidyard.com *.vimeo.com *.hp.com *.etilize.com *.1worldsync.com *.spexaccess.net *.onetrust.com *.administrateweblink.com *.stripe.com *.sketchfab.com *.fiservapps.com *.microsoft.com justone.ai *.mktoweb.com *.adobedc.net;font-src * data:;connect-src 'self' *.cdw.com *.cdw.ca *.richrelevance.com *.qualtrics.com *.optimizely.com *.needle.com *.appspot.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.googleapis.com *.akamaihd.net *.google.com *.justuno.com *.demdex.net *.d41.co *.cxense.com *.webcollage.net *.googletagmanager.com *.googletagservices.com *.go-mpulse.net *.linkedin.com *.facebook.com *.cloudfront.net *.bluecore.com *.akstat.io data.g2.com *.g2crowd.com *.omtrdc.net *.spexlive.net *.turnto.com *.hubapi.com *.syndigo.com *.syndigo.cloud *.hsforms.com *.hubspot-forms-static-embed.s3.amazonaws.com *.hubspot.com accessibilityserver.org *.userway.org *.tiqcdn.com *.tealiumiq.com *.adroll.com *.scene7.com *.addressy.com *.etilize.com *.1worldsync.com *.quantserve.com *.spexaccess.net *.onetrust.com *.oribi.io *.cookielaw.org *.stackadapt.com *.administrateweblink.com *.pactsafe.io *.administratehq.com *.sketchfab.com sierra.chat *.algorecs.com *.onelink-edge.com *.adobedtm.com *.mktoresp.com *.mktoapi.com *.mktoweb.com *.mktoedge.com *.adobedc.net *.marketo.net p11.techlab-cdn.com;object-src 'self' *.cdw.com *.scene7.com;media-src 'self' *.cdw.com *.webcollage.net *.youtube.com blob: *.spexlive.net *.syndigo.com *.syndigo.cloud *.userway.org *.tiqcdn.com *.scene7.com *.etilize.com *.1worldsync.com *.spexaccess.net *.sketchfab.com;worker-src 'self' *.needle.com *.cloudfront.net blob:;
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Strengthen CSP by removing 'unsafe-eval'
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
2 headers
Connection
Performance
Transfer-Encoding
Transfer-Encoding
Performance
chunked
Caching Headers
2 headers
Cache-Control
Caching
no-store, no-cache
Pragma
Caching
no-cache
Content Headers
1 headers
Content-Type
Content
text/html; charset=utf-8
Server Headers
0 headers
No server headers found
CORS Headers
0 headers
No CORS headers found
Cookies Headers
1 headers
Set-Cookie
Cookies
bm_sz=8009FAA225E61D753C62B85C8458D244~YAAQkGvcF4F8ilObAQAAFk2ugh6LYlG4SYqA8c4RaYYXxePauObBm4W5WSVMia5MCpnjaCdQp3oyeX7xW7iVhDrpCbTSXebFpv+p3kE0INb9wZiJw3F2JGwotUCBWhguarkqwXzv+vsD0mRhW6TII1sQuzszDwTMmQ1H6Jlf1oNZhui6IanBfDQJq5UqqldeSZhy+3v4gjQzG4WfA5PavSgpeVqBh1ESOriHbp1cH0WyhsydCbe9V+H+sdl4C6Zm2Gik/E0tuOaamURWd1OTCdH5xiKf5WmTyiPOv71jOxff/j5tVRJ36Fg8rjFl0Ml0B4N+MUBj67l2Dnmz5quqVzDZDrISDFY=~3360053~3356482; Domain=.cdw.ca; Path=/; Expires=Sat, 03 Jan 2026 11:06:59 GMT; Max-Age=14400; SameSite=None; Secure
Other Headers
7 headers
Date
Other
Sat, 03 Jan 2026 07:06:59 GMT
P3p
Other
CP="CAO DSP DEVa TAIa OUR BUS UNI FIN COM NAV INT STA"
Server-Timing
Other
ak_p; desc="1767424019650_400321424_1414964965_5557_15596_1_5_-";dur=1
X-Akam-Sw-Version
Other
0.5.0
X-Akamai-Transformed
Other
9l 24036 0 pmb=mRUM,2
X-Cdw-Device
Other
desktop
X-Cdw-Member
Other
201
Recommendations
Enable compression (gzip/brotli) to improve performance