Open
Cached
·
just now
20
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=63072000
Content-Security-Policy
Basic
default-src; img-src; style-src; +9 more
default-src 'self' https://*.pixelcut.app https://*.pixelcut.ai https://auth.prod.pixelcut.ai https://accounts.google.com/gsi/; img-src 'self' https: data: blob: gs: https://d33v4339jhl8k0.cloudfront.net https://*.google-analytics.com https://*.googletagmanager.com https://*.analytics.google.com https://*.g.doubleclick.net https://*.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com/gsi/style https://*.iubenda.com https://assets.churnkey.co; font-src 'self' 'unsafe-inline' https://*.pixelcut.app https://fonts.gstatic.com https://assets.churnkey.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://beacon-v2.helpscout.net https://accounts.google.com/gsi/client https://*.googleapis.com https://googleads.g.doubleclick.net https://apis.google.com https://cdn-cookieyes.com https://*.cookieyes.com https://challenges.cloudflare.com/turnstile/v0/api.js https://www.dropbox.com/static/api/2/dropins.js https://connect.facebook.net https://www.googleadservices.com https://www.google.com https://www.google-analytics.com https://*.googletagmanager.com https://js.stripe.com/v3 https://js.stripe.com/v3/ https://assets.churnkey.co https://*.iubenda.com https://r.wdfl.co todesktop-internal://*; object-src 'self' blob:; media-src 'self' blob: https://beacon-v2.helpscout.net https://cdn3.pixelcut.app https://storage.googleapis.com/ https://*.pixelcut.app https://*.pixelcut.ai; frame-src 'self' https://accounts.google.com/gsi/ https://auth.prod.pixelcut.ai https://challenges.cloudflare.com/ https://content.googleapis.com/ https://docs.google.com/ https://accounts.google.com/ https://td.doubleclick.net/ https://www.googletagmanager.com https://www.facebook.com https://js.stripe.com/; connect-src 'self' file: data: blob: filesystem: ws: https://images.unsplash.com https://images.pexels.com https://*.pixelcut.app https://*.pixelcut.ai https://d3hb14vkzrxvla.cloudfront.net https://*.pixelcut.app https://accounts.google.com/gsi/ https://*.googleapis.com https://www.googleadservices.com https://*.sentry.io https://*.mixpanel.com https://beaconapi.helpscout.net https://chatapi.helpscout.net https://d33v4339jhl8k0.cloudfront.net https://endpoint1.collection.us2.sumologic.com https://cdn-cookieyes.com https://*.cookieyes.com https://dl.dropboxusercontent.com/1/ https://apis.google.com/ https://connect.facebook.net https://www.facebook.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://google.com https://*.google.com https://stripe.com https://*.stripe.com https://api.churnkey.co https://fal.media https://*.fal.media https://content.pixelcut.ai https://content-staging.pixelcut.ai https://assets.pixelcut.ai https://assets.staging.pixelcut.app https://api.getrewardful.com https://api.statsig.com https://featuregates.org https://statsigapi.net https://events.statsigapi.net https://api.statsigcdn.com https://featureassets.org https://assetsconfigcdn.org https://prodregistryv2.org https://cloudflare-dns.com https://beyondwickedmapping.org; worker-src 'self' blob:; child-src 'self' blob:; frame-ancestors 'none'
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
fullscreen=self https://challenges.cloudflare.com
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
Performance Headers
3 headers
Connection
Performance
close
Transfer-Encoding
Performance
chunked
Vary
Performance
accept-encoding
Caching Headers
3 headers
Age
Caching
32525
Cache-Control
Caching
public, max-age=0, s-maxage=86400
Last-Modified
Caching
Sat, 31 Jan 2026 22:10:26 GMT
Content Headers
1 headers
Content-Type
Content
text/html
Server Headers
1 headers
Server
Server
cloudflare
CORS Headers
1 headers
Access-Control-Allow-Origin
Cors
https://challenges.cloudflare.com
Cookies Headers
0 headers
No cookies headers found
Other Headers
7 headers
Cdn-Cache-Control
Other
public, max-age=86400
Cf-Cache-Status
Other
HIT
Cf-Ray
Other
9c6fa41b29b1f26e-IAD
Date
Other
Sun, 01 Feb 2026 07:12:32 GMT
Link
Other
<https://cdn3.pixelcut.app>; rel="preconnect"; crossorigin=anonymous,<https://cdn3.pixelcut.app/web/fonts/inter/Inter-Regular.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous,<https://cdn3.pixelcut.app/web/fonts/inter/Inter-Medium.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous,<https://cdn3.pixelcut.app/web/fonts/inter/Inter-SemiBold.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous,<https://cdn3.pixelcut.app/web/fonts/inter/Inter-Bold.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous
X-Vercel-Cache
Other
MISS
X-Vercel-Id
Other
iad1::iad1::xksgc-1769897426501-360a23f00868
Recommendations
Enable compression (gzip/brotli) to improve performance