Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 13.249.228.19 |
| CDN | CDN (Miss from cloudfront) |
| Compression | gzip |
|
ℹ 🔵 Missing HSTS | HTTP Strict Transport Security is not configured. Recommended for HTTPS sites. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 13.249.228.19
CDN CDN (Miss from cloudfront)
Compression gzip
ℹ 🔵 Missing HSTS HTTP Strict Transport Security is not configured. Recommended for HTTPS sites.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://pay.hotmart.com:443 | 307 | HTTP/2 307 |
| 2 | https://pay.hotmart.com/error?errorMessage=008 | 200 | HTTP/2 200 |
#1 URL https://pay.hotmart.com:443
HTTP Status Code 307
Status HTTP/2 307
#2 URL https://pay.hotmart.com/error?errorMessage=008
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 0.6 ms |
| TCP Connect | 1.8 ms |
| TLS Handshake | 4.9 ms |
| Time To First Byte (TTFB) | 359.6 ms |
| Content Download | 245 ms |
| Total Response Time | 604.6 ms |
DNS Lookup 0.6 ms
TCP Connect 1.8 ms
TLS Handshake 4.9 ms
Time To First Byte (TTFB) 359.6 ms
Content Download 245 ms
Total Response Time 604.6 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✘ Not configured |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ⚠ Not configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✘ Not configured
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ⚠ Not configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
Detected Technologies
| Technology | Vue.js Tailwind CSS Google Analytics Google Tag Manager Cloudflare Nuxt.js Hotjar Intercom HubSpot |
Technology Vue.js Tailwind CSS Google Analytics Google Tag Manager Cloudflare Nuxt.js Hotjar Intercom HubSpot
HTTP Headers
| Content-type
| text/html;charset=utf-8 |
| Date
| Thu, 23 Jul 2026 20:59:46 GMT |
| Content-encoding
| gzip |
| X-powered-by
| Nuxt |
| Content-security-policy
| script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://buildstaging.com https://*.buildstaging.com https://hotmart.com https://*.hotmart.com https://*.auth.hotmart.com https://*.zopim.com https://*.intercom.io https://*.octadesk.com https://*.tawk.to https://*.jivosite.com https://*.jivo.ru https://*.crisp.chat https://*.freshchat.com https://*.freshworks.com https://d36mpcpuzc4ztk.cloudfront.net https://*.zendesk.com https://*.zdassets.com https://*.smooch.io https://*.intercomcdn.com https://*.ebanx.com https://*.worldpay.com https://*.payulatam.com https://www.paypal.com https://*.paypal.com https://*.paypalobjects.com https://*.dlocal.com https://*.y.uno https://*.sequrapi.com https://*.sift.com https://*.k-analytix.com https://*.online-metrix.net https://*.kwai.net https://*.ap4r.com https://*.tiktok.com https://*.pinterest.com https://*.pinimg.com https://*.infusionsoft.com https://*.outbrain.com https://*.funnelytics.io https://*.bing.com https://*.criteo.net https://*.facebook.com https://*.facebook.net https://www.facebook.net https://*.ltrck.com.br https://*.app-us1.com https://*.trackcmp.net https://*.hyros.com https://*.tracking.hyros.com https://*.licdn.com https://*.taboola.com https://*.ads-twitter.com https://*.woopra.com https://*.hubspot.com https://*.hsadspixel.net https://*.hubspotfeedback.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hscollectedforms.net https://*.usemessages.com https://*.hsleadflows.net https://*.edge.sdk.awswaf.com/ https://*.doubleclick.net https://www.google-analytics.com https://www.googletagmanager.com https://*.googletagmanager.com https://*.google.com https://www.googleadservices.com https://*.googleapis.com https://googleads.g.doubleclick.net https://*.googlesyndication.com https://*.survicate.com https://*.survicate-cdn.com https://*.clarity.ms https://polyfill-fastly.io https://www.youtube.com https://*.cloudflare.com https://*.hotjar.com https://*.fontawesome.com https://www.gstatic.com https://*.deadlinefunnel.com https://*.jsdelivr.net https://*.klarna.com; report-to csp-violations; report-uri /api/csp-report |
| Report-to
| {"group":"csp-violations","max_age":86400,"endpoints":[{"url":"/api/csp-report"}]} |
| Vary
| Accept-Encoding |
| X-cache
| Miss from cloudfront |
| Via
| 1.1 d8a9044e7ab9f5d354357cf682a1b5d2.cloudfront.net (CloudFront) |
| X-amz-cf-pop
| CDG50-P6 |
| Alt-svc
| h3=":443"; ma=86400 |
| X-amz-cf-id
| _RLsd9fa-CkMoNSWRPh-xuNp7FkYaUVbD6t9hJ0B5bHuneS1kbePfg== |
Meta Tags
| Viewport | width=device-width, initial-scale=1 |
| Referrer | no-referrer-when-downgrade |
Content-type text/html;charset=utf-8
Date Thu, 23 Jul 2026 20:59:46 GMT
Content-encoding gzip
X-powered-by Nuxt
Content-security-policy script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://buildstaging.com https://*.buildstaging.com https://hotmart.com https://*.hotmart.com https://*.auth.hotmart.com https://*.zopim.com https://*.intercom.io https://*.octadesk.com https://*.tawk.to https://*.jivosite.com https://*.jivo.ru https://*.crisp.chat https://*.freshchat.com https://*.freshworks.com https://d36mpcpuzc4ztk.cloudfront.net https://*.zendesk.com https://*.zdassets.com https://*.smooch.io https://*.intercomcdn.com https://*.ebanx.com https://*.worldpay.com https://*.payulatam.com https://www.paypal.com https://*.paypal.com https://*.paypalobjects.com https://*.dlocal.com https://*.y.uno https://*.sequrapi.com https://*.sift.com https://*.k-analytix.com https://*.online-metrix.net https://*.kwai.net https://*.ap4r.com https://*.tiktok.com https://*.pinterest.com https://*.pinimg.com https://*.infusionsoft.com https://*.outbrain.com https://*.funnelytics.io https://*.bing.com https://*.criteo.net https://*.facebook.com https://*.facebook.net https://www.facebook.net https://*.ltrck.com.br https://*.app-us1.com https://*.trackcmp.net https://*.hyros.com https://*.tracking.hyros.com https://*.licdn.com https://*.taboola.com https://*.ads-twitter.com https://*.woopra.com https://*.hubspot.com https://*.hsadspixel.net https://*.hubspotfeedback.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hscollectedforms.net https://*.usemessages.com https://*.hsleadflows.net https://*.edge.sdk.awswaf.com/ https://*.doubleclick.net https://www.google-analytics.com https://www.googletagmanager.com https://*.googletagmanager.com https://*.google.com https://www.googleadservices.com https://*.googleapis.com https://googleads.g.doubleclick.net https://*.googlesyndication.com https://*.survicate.com https://*.survicate-cdn.com https://*.clarity.ms https://polyfill-fastly.io https://www.youtube.com https://*.cloudflare.com https://*.hotjar.com https://*.fontawesome.com https://www.gstatic.com https://*.deadlinefunnel.com https://*.jsdelivr.net https://*.klarna.com; report-to csp-violations; report-uri /api/csp-report
Report-to {"group":"csp-violations","max_age":86400,"endpoints":[{"url":"/api/csp-report"}]}
Vary Accept-Encoding
X-cache Miss from cloudfront
Via 1.1 d8a9044e7ab9f5d354357cf682a1b5d2.cloudfront.net (CloudFront)
X-amz-cf-pop CDG50-P6
Alt-svc h3=":443"; ma=86400
X-amz-cf-id _RLsd9fa-CkMoNSWRPh-xuNp7FkYaUVbD6t9hJ0B5bHuneS1kbePfg==
