SSL Verification Bypassed
The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.
Reason:
Expired Certificate - the server's certificate has expired
Open
Cached
·
just now
19
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Basic
script-src; worker-src; frame-src; +4 more
script-src 'unsafe-eval' 'unsafe-inline' 'self' *.openai.com chatgpt.com *.donal-tobin.workers.dev *.immagnify.com www.google.com www.gstatic.com *.upvert.io *.upvertcdn.io *.liadm.com *.usbrowserspeed.com *.getwarmly.com *.datashopper.com *.hubspot.com *.sentry-cdn.com *.cloudflare.com *.googleapis.com *.apollo.io *.redditstatic.com *.gstatic.com *.wistia.com *.termly.io *.unifyintent.com *.calendly.com *.adroll.com *.whattime.co.kr *.amazonaws.com *.referralcandy.com *.doubleclick.net *.clearbitscripts.com *.arcade.software *.clarity.ms *.clearbitjs.com *.capterra.com *.facebook.net *.googletagmanager.com *.hs-scripts.com *.licdn.com *.woopra.com *.ads-twitter.com *.youtube.com *.hotjar.com *.hsforms.net *.hs-analytics.net *.hs-banner.com *.hsadspixel.net *.hscollectedforms.net *.bing.com *.google-analytics.com *.g2crowd.com *.autopilothq.com *.mxpnl.com *.chilipiper.com *.googleadservices.com *.clickcease.com *.intercomcdn.com *.intercom.io *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com; worker-src 'self' blob:; frame-src www.google.com www.gstatic.com app.vwo.com whattime.co.kr calendly.com *.liadm.com *.adroll.com *.doubleclick.net *.youtube.com *.facebook.com *.hsforms.com *.chilipiper.com *.arcade.software *.googletagmanager.com *.visualwebsiteoptimizer.com; default-src https: wss: data: 'unsafe-inline' ; object-src 'none'; frame-ancestors 'none' ; media-src 'self' blob: https:
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
geolocation=()
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
Performance Headers
1 headers
Connection
Performance
close
Caching Headers
3 headers
Age
Caching
82591
Etag
Caching
"4844d197d742a7c48a8eab0b2e1089ed"
Last-Modified
Caching
Fri, 23 Jan 2026 12:46:08 GMT
Content Headers
2 headers
Content-Length
Content
112091
Content-Type
Content
text/html
Server Headers
1 headers
Server
Server
AmazonS3
CORS Headers
0 headers
No CORS headers found
Cookies Headers
0 headers
No cookies headers found
Other Headers
6 headers
Date
Other
Fri, 23 Jan 2026 13:13:53 GMT
Via
Other
1.1 2896f6be77233cf3f24b7a1aaae1c6f2.cloudfront.net (CloudFront)
X-Amz-Cf-Id
Other
BntNeR6d6rp09F3pV02kbJA481sz4dPHue27q0tD7fv4GxRqOFV0qQ==
X-Amz-Cf-Pop
Other
IAD55-P4
X-Amz-Version-Id
Other
81CQ.5RmBjzJl8E1h7GqqGINfa8WmYk2
X-Cache
Other
Hit from cloudfront
Recommendations
Enable compression (gzip/brotli) to improve performance
Add Cache-Control header to optimize caching