URL Inspection: https://designlab.xbox

Open Cached · 4h ago

HTTP Status

200

Ping

79 ms

Technologies

Technologies Detected

Infrastructure & Network (4)

CDN	Adobe Fonts (Typekit) Adobe Fonts (formerly Typekit) is a web font service that provides access to thousands of high-quality fonts for use on websites.
Description: Adobe Fonts (formerly Typekit) is a web font service that provides access to thousands of high-quality fonts for use on websites. It's integrated with Adobe Creative Cloud and provides reliable font delivery through a global CDN, ensuring fast loading and consistent typography across devices. View full details
Evidence: • Header Content-Security-Policy-Report-Only (font-src): https://use.typekit.net • Header Content-Security-Policy-Report-Only (script-src): https://use.typekit.net

CDN	Google Fonts Google Fonts is a free, open-source web font service that provides hundreds of high-quality fonts for use on websites.
Description: Google Fonts is a free, open-source web font service that provides hundreds of high-quality fonts for use on websites. It delivers fonts through a global CDN, ensuring fast loading and consistent typography across devices and browsers, with no licensing fees. View full details
Evidence: • Header Content-Security-Policy-Report-Only (font-src): https://fonts.gstatic.com • Header Content-Security-Policy-Report-Only (style-src): https://fonts.googleapis.com

DNS Provider	Azure DNS Azure DNS is a hosting service for DNS domains from Microsoft Azure.
Description: Azure DNS is a hosting service for DNS domains from Microsoft Azure. It provides reliable DNS resolution with high availability, fast response times, and seamless integration with Azure services and resources. View full details
Evidence: • DNS Record NS: ns1-05.azure-dns.com • DNS Record NS: ns2-05.azure-dns.net • DNS Record NS: ns3-05.azure-dns.org • DNS Record NS: ns4-05.azure-dns.info

Storage	Azure Blob Storage Azure Blob Storage is Microsoft Azure's object storage service for storing large amounts of unstructured data such as images, videos, documents, and backups.
Description: Azure Blob Storage is Microsoft Azure's object storage service for storing large amounts of unstructured data such as images, videos, documents, and backups. It provides scalable, secure, and cost-effective cloud storage for applications and services. View full details
Evidence: • Header Content-Security-Policy-Report-Only (img-src): https://stospectprodglobal.blob.core.windows.net

Analytics & Marketing (5)

Analytics	Adobe Helix RUM Adobe Helix RUM (Real User Monitoring) is an open-source JavaScript library from Adobe that provides real user monitoring capabilities for web applications.
Description: Adobe Helix RUM (Real User Monitoring) is an open-source JavaScript library from Adobe that provides real user monitoring capabilities for web applications. It tracks performance metrics, user interactions, and page load times to help developers optimize website performance. View full details
Evidence: • HTML <script>: https://rum.hlx.page/.rum/@adobe/helix-rum-js@^2/dist/rum-standalone.js • Header Content-Security-Policy-Report-Only (script-src): https://rum.hlx.page

Analytics	Adobe Target Adobe Target is a personalization and optimization platform from Adobe Experience Cloud.
Description: Adobe Target is a personalization and optimization platform from Adobe Experience Cloud. It enables businesses to deliver personalized experiences, run A/B tests, and optimize content across web, mobile, and other channels using machine learning and real-time decision-making. View full details
Evidence: • Header Content-Security-Policy-Report-Only (script-src): https://amcglobal.sc.omtrdc.net • Header Content-Security-Policy-Report-Only (img-src): https://amcglobal.sc.omtrdc.net • Header Content-Security-Policy-Report-Only (connect-src): https://amcglobal.sc.omtrdc.net

Analytics	Google Analytics Google Analytics is the most widely used web analytics service that provides detailed insights into website traffic, user behavior, and conversion tracking.
Description: Google Analytics is the most widely used web analytics service that provides detailed insights into website traffic, user behavior, and conversion tracking. It offers comprehensive analytics including audience demographics, traffic sources, user journeys, and e-commerce tracking to help businesses understand and optimize their online presence. View full details
Evidence: • Header Content-Security-Policy-Report-Only (script-src): https://www.google-analytics.com • Header Content-Security-Policy-Report-Only (img-src): https://www.google-analytics.com • Header Content-Security-Policy-Report-Only (connect-src): https://www.google-analytics.com

Analytics	Google Tag Manager Google Tag Manager is a tag management system that allows marketers to manage and deploy marketing tags (analytics, tracking pixels, etc.) on websites without modifying code.
Description: Google Tag Manager is a tag management system that allows marketers to manage and deploy marketing tags (analytics, tracking pixels, etc.) on websites without modifying code. It provides a centralized interface for managing multiple tracking and analytics tools, improving website performance and simplifying tag deployment. View full details
Evidence: • Header Content-Security-Policy-Report-Only (frame-src): https://www.googletagmanager.com • Header Content-Security-Policy-Report-Only (script-src): https://www.googletagmanager.com • Header Content-Security-Policy-Report-Only (img-src): https://www.googletagmanager.com • Header Content-Security-Policy-Report-Only (connect-src): https://www.googletagmanager.com

Marketing	Adobe Experience Cloud Adobe Experience Cloud is a comprehensive suite of marketing, analytics, and advertising solutions from Adobe.
Description: Adobe Experience Cloud is a comprehensive suite of marketing, analytics, and advertising solutions from Adobe. It includes tools for content management, personalization, analytics, advertising, and customer experience management, all integrated into a unified platform. View full details
Evidence: • Header Content-Security-Policy-Report-Only (img-src): https://cm.everesttech.net

Advertising & Payments (3)

Advertising	Google Conversion Tracking Google Conversion Tracking is a feature of Google Ads that allows advertisers to measure the effectiveness of their ad campaigns by tracking when users complete valuable actions on their websites, such as purchases, sign-ups, or form submissions.
Description: Google Conversion Tracking is a feature of Google Ads that allows advertisers to measure the effectiveness of their ad campaigns by tracking when users complete valuable actions on their websites, such as purchases, sign-ups, or form submissions. View full details
Evidence: • Header Content-Security-Policy-Report-Only (script-src): https://www.googleadservices.com • Header Content-Security-Policy-Report-Only (img-src): https://www.googleadservices.com • Header Content-Security-Policy-Report-Only (connect-src): https://www.googleadservices.com

Payments	Braintree Braintree (owned by PayPal) is a payment gateway that enables businesses to accept online payments.
Description: Braintree (owned by PayPal) is a payment gateway that enables businesses to accept online payments. It provides APIs for processing credit card payments, PayPal, and digital wallets, with features for fraud prevention, recurring billing, and international payments. View full details
Evidence: • Header Content-Security-Policy-Report-Only (frame-src): https://braintreegateway.com • Header Content-Security-Policy-Report-Only (script-src): https://braintreegateway.com • Header Content-Security-Policy-Report-Only (connect-src): https://braintreegateway.com

Payments	PayPal PayPal is a global online payment platform that allows individuals and businesses to send and receive payments online.
Description: PayPal is a global online payment platform that allows individuals and businesses to send and receive payments online. It provides payment processing, invoicing, subscription billing, and merchant services, making it one of the most widely used payment methods for e-commerce and online transactions. View full details
Evidence: • Header Content-Security-Policy-Report-Only (frame-src): https://paypal.com • Header Content-Security-Policy-Report-Only (script-src): https://www.paypal.com • Header Content-Security-Policy-Report-Only (img-src): https://t.paypal.com • Header Content-Security-Policy-Report-Only (img-src): https://paypal.com • Header Content-Security-Policy-Report-Only (connect-src): https://www.paypal.com ... and 1 more

Security & Privacy (2)

Security	Agari Agari (now part of Proofpoint) is an email security platform that protects organizations from email-based attacks using machine learning and identity-based authentication.
Description: Agari (now part of Proofpoint) is an email security platform that protects organizations from email-based attacks using machine learning and identity-based authentication. It provides protection against phishing, business email compromise (BEC), and other email threats by analyzing email authentication and behavior patterns. View full details
Evidence: • DMARC RUA: mailto:d@rua.agari.com • DMARC RUF: mailto:d@ruf.agari.com

Security	MaxMind MaxMind is a geolocation and fraud detection service that provides IP geolocation databases and fraud detection tools.
Description: MaxMind is a geolocation and fraud detection service that provides IP geolocation databases and fraud detection tools. It helps organizations identify the geographic location of website visitors and detect potentially fraudulent transactions based on IP address analysis. View full details
Evidence: • Header Content-Security-Policy-Report-Only (connect-src): https://geoip-js.com

Other (4)

Monitoring	New Relic New Relic is an observability platform that provides application performance monitoring (APM), infrastructure monitoring, and log management.
Description: New Relic is an observability platform that provides application performance monitoring (APM), infrastructure monitoring, and log management. It helps businesses monitor, debug, and optimize their applications and infrastructure in real-time. View full details
Evidence: • Header Content-Security-Policy-Report-Only (script-src): https://js-agent.newrelic.com • Header Content-Security-Policy-Report-Only (script-src): https://newrelic.com • Header Content-Security-Policy-Report-Only (connect-src): https://newrelic.com

Monitoring	Sentry Sentry is an error tracking and performance monitoring platform that helps developers identify, debug, and resolve errors in their applications.
Description: Sentry is an error tracking and performance monitoring platform that helps developers identify, debug, and resolve errors in their applications. It provides real-time error alerts, stack traces, performance monitoring, and release tracking to improve application reliability. View full details
Evidence: • Header Content-Security-Policy-Report-Only: font-src fonts.gstatic.com use.typekit.net .typekit.net .gstatic.com data: 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net .adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net .youtube.com .youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ .braintreegateway.com .paypal.com google.com .google.com www.googletagmanager.com 'self' 'unsafe-inline'; style-src .adobe.com fonts.googleapis.com https://.abtasty.com api.addressy.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests ; form-action login.live.com login.microsoftonline.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com .paypal.com 'self' 'unsafe-inline'; script-src bam.nr-data.net js-agent.newrelic.com cdn.spectrumcustomizer.com js.monitor.azure.com a.clarity.ms b.clarity.ms c.clarity.ms d.clarity.ms e.clarity.ms f.clarity.ms g.clarity.ms h.clarity.ms i.clarity.ms j.clarity.ms k.clarity.ms l.clarity.ms m.clarity.ms n.clarity.ms o.clarity.ms p.clarity.ms r.clarity.ms s.clarity.ms t.clarity.ms u.clarity.ms w.clarity.ms x.clarity.ms y.clarity.ms z.clarity.ms www.clarity.ms www.paypal.com www.paypalobjects.com assets.adobedtm.com .adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com .newrelic.com .nr-data.net .commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com .vimeocdn.com .youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net .magento-ds.com use.typekit.net .typekit.net google.com .google.com .cdn-apple.com .braintreegateway.com https://rum.hlx.page https://assets.sandbox.eshopworld.com https://assets.eshopworld.com https://.abtasty.com api.addressy.com 'self' 'unsafe-inline' 'unsafe-eval'; media-src assets.xboxservices.com cms-assets.xboxservices.com .adobe.com 'self' 'unsafe-inline'; img-src images-xboxdesignlab.xbox.com spectrumcustomizer.com cdn.spectrumcustomizer.com api.spectrumcustomizer.com www.colorhexa.com blob: c.bing.com c1.microsoft.com c.xbox.com stospectprodglobal.blob.core.windows.net t.paypal.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net .adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com .vimeocdn.com i.ytimg.com .youtube.com p.typekit.net .paypal.com .typekit.net .gstatic.com validator.swagger.io services.postcodeanywhere.co.uk data: 'self' 'unsafe-inline'; connect-src bam.nr-data.net api.spectrumcustomizer.com cdn.spectrumcustomizer.com spectrumcustomizer.com www.paypal.com browser.events.data.microsoft.com client.spectrumcustomizer.com a.clarity.ms b.clarity.ms c.clarity.ms d.clarity.ms e.clarity.ms f.clarity.ms g.clarity.ms h.clarity.ms i.clarity.ms j.clarity.ms k.clarity.ms l.clarity.ms m.clarity.ms n.clarity.ms o.clarity.ms p.clarity.ms r.clarity.ms s.clarity.ms t.clarity.ms u.clarity.ms w.clarity.ms x.clarity.ms y.clarity.ms z.clarity.ms www.clarity.ms q.clarity.ms v.clarity.ms dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com .newrelic.com .nr-data.net vimeo.com .adobe.io performance.typekit.net .sentry.io .paypal.com google.com .google.com .braintreegateway.com .braintree-api.com https://geoip-js.com api.addressy.com 'self' 'unsafe-inline';

Video	Vimeo Vimeo is a video hosting and sharing platform that focuses on high-quality video content and professional video hosting.
Description: Vimeo is a video hosting and sharing platform that focuses on high-quality video content and professional video hosting. It provides video hosting, live streaming, video editing tools, and monetization options for creators and businesses, with an emphasis on quality and professional content. View full details
Evidence: • Header Content-Security-Policy-Report-Only (frame-src): https://player.vimeo.com • Header Content-Security-Policy-Report-Only (script-src): https://vimeo.com • Header Content-Security-Policy-Report-Only (script-src): https://www.vimeo.com • Header Content-Security-Policy-Report-Only (connect-src): https://vimeo.com

Video	YouTube YouTube is the world's largest video-sharing platform, owned by Google.
Description: YouTube is the world's largest video-sharing platform, owned by Google. It allows users to upload, share, and view videos, serving as a platform for entertainment, education, marketing, and content creation. YouTube also provides APIs and embedding capabilities for businesses to integrate video into their websites. View full details
Evidence: • Header Content-Security-Policy-Report-Only (frame-src): https://youtube-nocookie.com

Metadata & SEO

Title

Xbox Design Lab | Xbox

Description

Design your own next-gen Xbox Wireless Controller in the Xbox Design Lab. Choose from a combination of colors, patterns, textured triggers, and Share buttons.

Keywords

xbox design lab, xbox design lab controller 2

Canonical URL

https://xboxdesignlab.xbox.com/en-us

Language

en-us

Viewport

viewport-fit=cover, width=device-width, initial-scale=1.0

SSL/TLS Certificate

View Full SSL Report

Issued By

C=US, O=Microsoft Corporation, CN=Microsoft Azure RSA TLS Issuing CA 08

Security Score

84 /100

Social Media Cards

OpenGraph (4 properties)

Type

website

Title

Xbox Design Lab

Image

Url

https://xboxdesignlab.xbox.com/en-us/

Twitter Cards (2 properties)

Image

https://xboxdesignlab.xbox.com/static/version1765803179/frontend/Xbox/default/en_US/images/logo.svg

Card

summary_large_image

Network & Hosting

View DNS Records

20.112.250.133 • AS8075

Microsoft

Resources

designlab.xbox (1 resources)

Images (1)

• https://designlab.xbox//

eshopworld.com (1 resources)

Scripts (1)

• https://assets.eshopworld.com/public/extensions/pqwpqw/296990c3-7cb2-4faf-8949-bd01b9420720.js

Technologies Detected

Infrastructure & Network (4)

Analytics & Marketing (5)

Advertising & Payments (3)

Security & Privacy (2)

Other (4)

Metadata & SEO

SSL/TLS Certificate

Social Media Cards

OpenGraph (4 properties)

Twitter Cards (2 properties)

Network & Hosting

Resources

designlab.xbox (1 resources)

Images (1)

eshopworld.com (1 resources)

Scripts (1)

hlx.page (1 resources)

Scripts (1)

spectrumcustomizer.com (22 resources)

Images (22)

xbox.com (72 resources)

Scripts (15)

Stylesheets (2)

Fonts (6)

Images (49)