Open
Cached
·
just now
20
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
Good
default-src; style-src; script-src; +2 more
default-src 'self' *.saia.com *.saiasecure.com saiasecure.com *.gcs-web.com *.iexapis.com *.vimeo.com data: *.eum-appdynamics.com *.w3.org *.google.com cdn.contentful.com *.ctfassets.net *.advertising.com *.casalemedia.com *.rubiconproject.com *.outbrain.com *.yahoo.com *.pubmatic.com *.taboola.com *.rlcdn.com *.adnxs.com *.bidswitch.net *.3lift.com *.openx.net *.adroll.com fonts.googleapis.com *.googletagmanager.com fonts.gstatic.com *.mktoresp.com *.google-analytics.com *.linkedin.com *.google-analytics.co *.doubleclick.net *.adsymptotic.com *.facebook.com d.adroll.mgr.consensu.org *.tvsquared.com *.powerbi.com *.okta.com *.cookielaw.org *.onetrust.com *.gstatic.com *.site24x7static.com *.stackadapt.com *.qvdt3feo.com *.azurewebsites.net *.linkex.us 44.238.122.172 100.20.58.101 35.85.84.151 44.228.85.26 34.215.155.61 35.160.46.251 52.71.121.170 18.210.229.244 44.212.189.233 3.212.39.155 52.22.50.55 54.156.2.105 *.mountain.com; style-src 'self' *.doubleclick.net fonts.googleapis.com 'unsafe-inline' *.cookielaw.org *.onetrust.com *.google.com *.gstatic.com *.site24x7static.com *.stackadapt.com *.qvdt3feo.com *.azurewebsites.net 44.238.122.172 100.20.58.101 35.85.84.151 44.228.85.26 34.215.155.61 35.160.46.251 52.71.121.170 18.210.229.244 44.212.189.233 3.212.39.155 52.22.50.55 54.156.2.105 *.mountain.com; script-src 'self' *.appdynamics.com *.ipredictive.com *.analytics-sm.com analytics-sm.com *.adsymptotic.com *.adroll.com *.doubleclick.net *.consensu.org munchkin.marketo.net *.googletagmanager.com *.google-analytics.com *.google-analytics.co snap.licdn.com connect.facebook.net 614-yjx-388.mktoresp.com *.googleadservices.com collector-6453.tvsquared.com s.adroll.com *.clickdimensions.com *.cookielaw.org *.onetrust.com *.google.com *.gstatic.com 'unsafe-inline' *.site24x7static.com *.stackadapt.com *.qvdt3feo.com *.azurewebsites.net *.linkex.us 44.238.122.172 100.20.58.101 35.85.84.151 44.228.85.26 34.215.155.61 35.160.46.251 52.71.121.170 18.210.229.244 44.212.189.233 3.212.39.155 52.22.50.55 54.156.2.105 *.mountain.com; img-src 'self' data: *.saiasecure.com saiasecure.com *.saia.com *.google.com *.doubleclick.net *.openx.net *.rlcdn.com *.3lift.com *.adnxs.com *.bidswitch.net *.taboola.com *.outbrain.com *.yahoo.com *.rubiconproject.com *.pubmatic.com *.advertising.com *.casalemedia.com *.linkedin.com *.w3.org *.tvsquared.com *.google-analytics.com *.google-analytics.co *.adroll.com *.facebook.com *.ctfassets.net analytics-sm.com *.adsymptotic.com *.analytics-sm.com *.ipredictive.com *.cookielaw.org *.onetrust.com *.gstatic.com *.site24x7static.com *.stackadapt.com *.qvdt3feo.com *.azurewebsites.net *.linkex.us 44.238.122.172 100.20.58.101 35.85.84.151 44.228.85.26 34.215.155.61 35.160.46.251 52.71.121.170 18.210.229.244 44.212.189.233 3.212.39.155 52.22.50.55 54.156.2.105 *.mountain.com; form-action 'self' *.facebook.com
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer
Permissions-Policy
Present
geolocation=(*);
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Strengthen CSP by removing 'unsafe-eval'
Performance Headers
3 headers
Connection
Performance
close
Transfer-Encoding
Performance
chunked
Vary
Performance
Accept-Encoding
Caching Headers
4 headers
Cache-Control
Caching
private, no-cache, no-store, must-revalidate
Expires
Caching
Sat, 01 Jan 2000 00:00:00 GMT
Last-Modified
Caching
Thu, 15 Jan 2026 18:06:38 GMT
Pragma
Caching
no-cache
Content Headers
1 headers
Content-Type
Content
text/html
Server Headers
1 headers
Server
Server
cloudflare
CORS Headers
0 headers
No CORS headers found
Cookies Headers
1 headers
Set-Cookie
Cookies
_cfuvid=AQgT_9GELoBpnXaL6p3mPyWSUkz.RN3rE8wcGluidiw-1769098916454-0.0.1.1-604800000; path=/; domain=.saia.com; HttpOnly; Secure; SameSite=None
Other Headers
3 headers
Cf-Cache-Status
Other
DYNAMIC
Cf-Ray
Other
9c2063223ea17ed1-IAD
Date
Other
Thu, 22 Jan 2026 16:21:56 GMT
Recommendations
Enable compression (gzip/brotli) to improve performance