Open
Cached
·
just now
26
Headers
Detected Technologies from Headers
AWS CloudFront
Google Tag Manager
G2
Mutiny
Reddit
Azure Blob Storage
Google DoubleClick
Google Analytics
Microsoft Advertising
6sense
Active incidents
New Relic
Google Cloud Storage
Google Static File Front End
LinkedIn
ZoomInfo
ShareThis
Drift
MaxMind
unpkg
Turtl
Google Search
Imperva
Active incidents
Adobe Marketo
Navattic
Qualified
Facebook
StackAdapt
Buzzsprout
OneTrust
Visual Website Optimizer
Vimeo
TechTarget
Google Optimize
Drupal
YouTube
The Trade Desk
Microsoft Clarity
jsDelivr
Google Cloud
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31536000, includeSubDomains, preload
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Vary
Cookie
connection: close vary: Cookie
Caching Headers
Cache-Control
max-age=0
Etag
"1786738339"
Last-Modified
Fri, 14 Aug 2026 20:12:19 GMT
cache-control: max-age=0 etag: "1786738339" last-modified: Fri, 14 Aug 2026 20:12:19 GMT
Content Headers
Content-Language
en
Content-Length
138516
Content-Type
text/html; charset=UTF-8
content-language: en content-length: 138516 content-type: text/html; charset=UTF-8
Server Headers
No server headers found
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Fri, 14 Aug 2026 20:12:19 GMT
Feature-Policy
geolocation 'self'
Traceresponse
00-18cbc50d92be7e24b9eeaca930988c85-aad123cacfd09d5e-01
X-Content-Security-Policy
default-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.google-analytics.com https://www.googleoptimize.com https://www.googletagmanager.com https://munchkin.marketo.net https://app-abj.marketo.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://geoip-js.com https://ads.avocet.io https://trk.techtarget.com https://j.6sc.co https://tags.srv.stackadapt.com https://ads.avct.cloud https://js.driftt.com https://js-agent.newrelic.com https://bam.nr-data.net https://cdn.jsdelivr.net https://js.adsrvr.org https://go.affec.tv https://bat.bing.com https://s7.addthis.com https://m.addthis.com https://z.moatads.com https://snap.licdn.com https://tracking.g2crowd.com https://connect.facebook.net *.visualwebsiteoptimizer.com https://app.vwo.com *.sharethis.com https://unpkg.com https://d1hgczpbubj217.cloudfront.net https://app-static.turtl.co https://js.zi-scripts.com *.mutinycdn.com https://www.clarity.ms https://scripts.clarity.ms *.roundprinceweb.com https://www.redditstatic.com https://go.proofpoint.com https://www.google.com https://www.gstatic.com https://www.buzzsprout.com *.vimeocdn.com https://storage.googleapis.com https://js.navattic.com *.qualified.com https://wpaassets.blob.core.windows.net *.youtube.com vimeo.com *.vimeo.com cdn.cookielaw.org *.onetrust.com *.proofpoint.com https://live.rezync.com; object-src 'self'; style-src 'self' 'unsafe-inline' *; img-src 'self' 'unsafe-inline' data: blob: *; media-src 'self' *.qualified.com; frame-src 'self' 'unsafe-inline' *; frame-ancestors 'self' app.mutinyhq.com; child-src 'self' 'unsafe-inline' blob: *.qualified.com; worker-src 'self' blob:; font-src 'self' 'unsafe-inline' data: *; connect-src 'self' 'unsafe-inline' *; report-uri /report-csp-violation
X-Debug-Info
eyJyZXRyaWVzIjowfQ==
X-Iinfo
46-86886574-86886645 NNNY CT(70 99 0) RT(1786738339073 164) q(0 0 0 2) r(2 2) U18
X-Imperva-Purge-Tags
0zT4,OsDy,6xRn,QIlE,9GyU,+8op,FhFx,iQT5,tYpi,gXHv,6A6E,GLRa,D6JF,dm3B,OtyN,6k53,IiTq,xkwr,FsD1,nhKZ,APfu,JwOP,qh6A,XEia,O4Kl,lZYo,Jh8x,keL6,Dwy8,n0uk,DHKI,xkLU,aBg6,1Brw,l7Q9,IcEz,M29V,IAov,m+bc,UOQk,SH1A,Nv4P,tA0X,ccT3,Coxs,4vaJ,mmUZ,dOVA,7Wem,pnp3,JtwV,b3SG,DYYA,mo9z,uXbd,xvhH,TE06,l9XW,7qGN,gUuI,n+K3,6s8K,G0Vk,EroV,SiQo,LeIH,C4m6,9/Wu,fAgm,OxAt,2Tie,p2IA,Po/X,8iwt,y2A2,wOXe,lW64,ZdC8,KOaJ,LUbe,3dt7,N+dQ,eM7g,z1RR,Nber,AV4O,DI/J,Maex,/n2H,E6NT,K/9C,QSQr,Z7y2,bYmT,xfb5,MQK2,OTfg,2Of+,tbpH,4uQ4,dKam,3Rik,l2/W,ohc8,P6i6,43f7,7Hq1,fJN0,kjLe,E8cn,oHpH,WAoV,ACxG,uwDo,Z8lP,G83H,MXuN,qH0M,sk9+,lsvV,iH9L
X-Permitted-Cross-Domain-Policies
none
X-Platform-Server
i-064fa3b07bf73545e, i-064fa3b07bf73545e
X-Webkit-Csp
default-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.google-analytics.com https://www.googleoptimize.com https://www.googletagmanager.com https://munchkin.marketo.net https://app-abj.marketo.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://geoip-js.com https://ads.avocet.io https://trk.techtarget.com https://j.6sc.co https://tags.srv.stackadapt.com https://ads.avct.cloud https://js.driftt.com https://js-agent.newrelic.com https://bam.nr-data.net https://cdn.jsdelivr.net https://js.adsrvr.org https://go.affec.tv https://bat.bing.com https://s7.addthis.com https://m.addthis.com https://z.moatads.com https://snap.licdn.com https://tracking.g2crowd.com https://connect.facebook.net *.visualwebsiteoptimizer.com https://app.vwo.com *.sharethis.com https://unpkg.com https://d1hgczpbubj217.cloudfront.net https://app-static.turtl.co https://js.zi-scripts.com *.mutinycdn.com https://www.clarity.ms https://scripts.clarity.ms *.roundprinceweb.com https://www.redditstatic.com https://go.proofpoint.com https://www.google.com https://www.gstatic.com https://www.buzzsprout.com *.vimeocdn.com https://storage.googleapis.com https://js.navattic.com *.qualified.com https://wpaassets.blob.core.windows.net *.youtube.com vimeo.com *.vimeo.com cdn.cookielaw.org *.onetrust.com *.proofpoint.com https://live.rezync.com; object-src 'self'; style-src 'self' 'unsafe-inline' *; img-src 'self' 'unsafe-inline' data: blob: *; media-src 'self' *.qualified.com; frame-src 'self' 'unsafe-inline' *; frame-ancestors 'self' app.mutinyhq.com; child-src 'self' 'unsafe-inline' blob: *.qualified.com; worker-src 'self' blob:; font-src 'self' 'unsafe-inline' data: *; connect-src 'self' 'unsafe-inline' *; report-uri /report-csp-violation
date: Fri, 14 Aug 2026 20:12:19 GMT feature-policy: geolocation 'self' traceresponse: 00-18cbc50d92be7e24b9eeaca930988c85-aad123cacfd09d5e-01 x-cdn: Imperva x-content-security-policy: default-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.google-analytics.com https://www.googleoptimize.com https://www.googletagmanager.com https://munchkin.marketo.net https://app-abj.marketo.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://geoip-js.com https://ads.avocet.io https://trk.techtarget.com https://j.6sc.co https://tags.srv.stackadapt.com https://ads.avct.cloud https://js.driftt.com https://js-agent.newrelic.com https://bam.nr-data.net https://cdn.jsdelivr.net https://js.adsrvr.org https://go.affec.tv https://bat.bing.com https://s7.addthis.com https://m.addthis.com https://z.moatads.com https://snap.licdn.com https://tracking.g2crowd.com https://connect.facebook.net *.visualwebsiteoptimizer.com https://app.vwo.com *.sharethis.com https://unpkg.com https://d1hgczpbubj217.cloudfront.net https://app-static.turtl.co https://js.zi-scripts.com *.mutinycdn.com https://www.clarity.ms https://scripts.clarity.ms *.roundprinceweb.com https://www.redditstatic.com https://go.proofpoint.com https://www.google.com https://www.gstatic.com https://www.buzzsprout.com *.vimeocdn.com https://storage.googleapis.com https://js.navattic.com *.qualified.com https://wpaassets.blob.core.windows.net *.youtube.com vimeo.com *.vimeo.com cdn.cookielaw.org *.onetrust.com *.proofpoint.com https://live.rezync.com; object-src 'self'; style-src 'self' 'unsafe-inline' *; img-src 'self' 'unsafe-inline' data: blob: *; media-src 'self' *.qualified.com; frame-src 'self' 'unsafe-inline' *; frame-ancestors 'self' app.mutinyhq.com; child-src 'self' 'unsafe-inline' blob: *.qualified.com; worker-src 'self' blob:; font-src 'self' 'unsafe-inline' data: *; connect-src 'self' 'unsafe-inline' *; report-uri /report-csp-violation x-debug-info: eyJyZXRyaWVzIjowfQ== x-drupal-dynamic-cache: HIT x-iinfo: 46-86886574-86886645 NNNY CT(70 99 0) RT(1786738339073 164) q(0 0 0 2) r(2 2) U18 x-imperva-purge-tags: 0zT4,OsDy,6xRn,QIlE,9GyU,+8op,FhFx,iQT5,tYpi,gXHv,6A6E,GLRa,D6JF,dm3B,OtyN,6k53,IiTq,xkwr,FsD1,nhKZ,APfu,JwOP,qh6A,XEia,O4Kl,lZYo,Jh8x,keL6,Dwy8,n0uk,DHKI,xkLU,aBg6,1Brw,l7Q9,IcEz,M29V,IAov,m+bc,UOQk,SH1A,Nv4P,tA0X,ccT3,Coxs,4vaJ,mmUZ,dOVA,7Wem,pnp3,JtwV,b3SG,DYYA,mo9z,uXbd,xvhH,TE06,l9XW,7qGN,gUuI,n+K3,6s8K,G0Vk,EroV,SiQo,LeIH,C4m6,9/Wu,fAgm,OxAt,2Tie,p2IA,Po/X,8iwt,y2A2,wOXe,lW64,ZdC8,KOaJ,LUbe,3dt7,N+dQ,eM7g,z1RR,Nber,AV4O,DI/J,Maex,/n2H,E6NT,K/9C,QSQr,Z7y2,bYmT,xfb5,MQK2,OTfg,2Of+,tbpH,4uQ4,dKam,3Rik,l2/W,ohc8,P6i6,43f7,7Hq1,fJN0,kjLe,E8cn,oHpH,WAoV,ACxG,uwDo,Z8lP,G83H,MXuN,qH0M,sk9+,lsvV,iH9L x-permitted-cross-domain-policies: none x-platform-server: i-064fa3b07bf73545e, i-064fa3b07bf73545e x-webkit-csp: default-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.google-analytics.com https://www.googleoptimize.com https://www.googletagmanager.com https://munchkin.marketo.net https://app-abj.marketo.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://geoip-js.com https://ads.avocet.io https://trk.techtarget.com https://j.6sc.co https://tags.srv.stackadapt.com https://ads.avct.cloud https://js.driftt.com https://js-agent.newrelic.com https://bam.nr-data.net https://cdn.jsdelivr.net https://js.adsrvr.org https://go.affec.tv https://bat.bing.com https://s7.addthis.com https://m.addthis.com https://z.moatads.com https://snap.licdn.com https://tracking.g2crowd.com https://connect.facebook.net *.visualwebsiteoptimizer.com https://app.vwo.com *.sharethis.com https://unpkg.com https://d1hgczpbubj217.cloudfront.net https://app-static.turtl.co https://js.zi-scripts.com *.mutinycdn.com https://www.clarity.ms https://scripts.clarity.ms *.roundprinceweb.com https://www.redditstatic.com https://go.proofpoint.com https://www.google.com https://www.gstatic.com https://www.buzzsprout.com *.vimeocdn.com https://storage.googleapis.com https://js.navattic.com *.qualified.com https://wpaassets.blob.core.windows.net *.youtube.com vimeo.com *.vimeo.com cdn.cookielaw.org *.onetrust.com *.proofpoint.com https://live.rezync.com; object-src 'self'; style-src 'self' 'unsafe-inline' *; img-src 'self' 'unsafe-inline' data: blob: *; media-src 'self' *.qualified.com; frame-src 'self' 'unsafe-inline' *; frame-ancestors 'self' app.mutinyhq.com; child-src 'self' 'unsafe-inline' blob: *.qualified.com; worker-src 'self' blob:; font-src 'self' 'unsafe-inline' data: *; connect-src 'self' 'unsafe-inline' *; report-uri /report-csp-violation
Recommendations
Enable compression (gzip/brotli) to improve performance