devacurl.com

Live preview

This site's Content-Security-Policy restricts embedding to specific origins ("frame-ancestors https://*.dev.devacurlaws.com https://*.staging.devacurlaws.com https://*.prod.devacurlaws.com https://admin.shopify.com https://devacurl.myshopify.com https://online-store-web.shopifyapps.com https://*.devacurl.com http://*.gitlab.io https://*.sephora.de http://localhost:*"), which does not include StatsMyWeb.

Since devacurl.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html;charset=UTF-8

Cache-Control

Not sent

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self' *.zdassests.com *.cloudinary.com;connect-src *.amplitude.com *.crazyegg.com *.yotpo.com https://*.prod.devacurlaws.com https://*.bing.com https://*.bounceexchange.com https://*.cdnbasket.net https://*.cdnwidget.com https://*.cookielaw.org https://*.devacurl.com https://*.devatech.us https://*.devatechpro.us https://*.doubleclick.net https://*.facebook.com https://*.google.com https://*.hotjar.com https://*.hotjar.io https://*.likeshop.me https://*.myshopify.com https://*.onetrust.com/ https://*.pinterest.com https://*.tiktok.com https://*.trackedweb.net https://*.zdassets.com https://*.zendesk.com https://*.zopim.com https://analytics.google.com/g/collect https://analytics.tiktok.com https://api.astutebot.com https://devacurl.2m8f.net https://dfp.bouncex.net https://events.bouncex.net https://perf-api.wknd.ai https://s3-us-west-2.amazonaws.com/afterpayus-integrations/javascript/modal/us_modal.html https://sentry.io https://*.sentry.io https://server.clearforme.com likeshop.me localhost:* wss://widget-mediator.zopim.com www.google-analytics.com *.userway.org *.attn.tv *.attentivemobile.com;font-src 'self' *.gstatic.com *.yotpo.com data: fonts.gstatic.com https://assets.bounceexchange.com likeshop.me *.userway.org *.attn.tv *.attentivemobile.com;frame-src *.afterpay.com *.crazyegg.com *.devacurl-email.com *.dotdigital-pages.com *.dotmailer-surveys.com *.doubleclick.net *.facebook.com *.googletagmanager.com *.hotjar.com *.meevo.com *.phorest.me *.userway.org *.youtube.com https://admin.rechargeapps.com/ https://assets.bounceexchange.com https://bot.emplifi.io/ https://calendly.com https://ct.pinterest.com https://dash.bounceexchange.com optimize.google.com phorest.com phorest.me *.attn.tv *.attentivemobile.com;frame-ancestors https://*.dev.devacurlaws.com https://*.staging.devacurlaws.com https://*.prod.devacurlaws.com https://admin.shopify.com https://devacurl.myshopify.com https://online-store-web.shopifyapps.com https://*.devacurl.com http://*.gitlab.io https://*.sephora.de http://localhost:*;img-src * blob: data: https://assets.bounceexchange.com https://events.bouncex.net optimize.google.com www.google-analytics.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' *.bing.com *.cookielaw.org *.crazyegg.com *.dashhudson.com *.devacurl-email.com *.dotdigital-pages.com *.dotmailer-surveys.com *.doubleclick.net *.facebook.net *.google.com *.google.com *.hotjar.com *.userway.org *.yotpo.com *.zdassets.com blob: https://*.afterpay.com https://*.bounceexchange.com https://*.calendly.com https://*.impactradius-event.com https://*.onetrust.com https://*.pinimg.com https://*.pinterest.com https://*.tiktok.com https://*.trackedweb.net https://analytics.tiktok.com https://analytics.tiktok.com/i18n/pixel/events.js https://bot.emplifi.io/ https://dash-staging.bounceexchange.com https://s.pinimg.com https://static.zdassets.com https://tag.bounceexchange.com https://tag.wknd.ai https://widget-mediator.zopim.com https://browser.sentry-cdn.com https://js.sentry-cdn.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com *.attn.tv *.attentivemobile.com;worker-src blob:;style-src 'self' 'unsafe-inline' *.crazyegg.com https://*.google.com https://*.googleapis.com https://*.mapbox.com https://*.yotpo.com https://assets.bounceexchange.com https://bot.emplifi.io/ *.userway.org;report-uri https://o4508767830081536.ingest.us.sentry.io/api/4508780251774976/security/?sentry_key=8cb2500831f76825af84f21b147c7349&sentry_environment=prod;media-src 'self' *.cloudinary.com *.crazyegg.com *.zdassets.com dashhudson-static.s3.amazonaws.com https://*.dashhudson.com;base-uri 'self';form-action 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests

Strict-Transport-Security

max-age=31536000; includeSubDomains

X-Frame-Options

Not sent

X-Content-Type-Options

nosniff

Referrer-Policy

no-referrer

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://devacurl.com/HTTP 301

   → https://devacurl.com/

2. 2.https://devacurl.com/HTTP 301

   → https://devacurl.com/us/

3. 3.https://devacurl.com/us/HTTP 301

   → https://www.devacurl.com/us/

4. 4.https://www.devacurl.com/us/HTTP 200

Meta tags

Title

Dermatologist Co-Developed Hair Care Products | DevaCurl

Description

Time to love your natural hair. Curls are all we do! All the know-how and products you need to cleanse, condition, & style your curls with definition and shine.

Canonical

https://www.devacurl.com/us

Robots

Not set

Generator

Not set

Open Graph title

Not set

Open Graph description

Not set

Open Graph image

Not set

Open Graph type

Not set

Twitter card

Not set

Twitter title

Not set

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

5

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Google Tag Manageranalytics

  Found "googletagmanager.com/gtm.js" in the page's HTML

Related domains