milliman.com

Live preview

This site's Content-Security-Policy restricts embedding to specific origins ("frame-ancestors 'self' https://*.sitecorecloud.io https://pages.sitecorecloud.io"), which does not include StatsMyWeb.

Since milliman.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

public,max-age=0,must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self' 'unsafe-inline' 'unsafe-eval' https://apps.sitecore.net https://*.sitecorecloud.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.milliman.com https://*.sitecorecloud.io https://www.googletagmanager.com https://www.google-analytics.com https://www.buzzsprout.com https://bat.bing.com https://js.driftt.com https://js.adsrvr.org https://solutions.invocacdn.com https://milliman.aiproxies.com https://www.google.com https://www.gstatic.com https://www.googleadservices.com https://analytics.cdn.aimediagroup.com https://pnapi.invoca.net https://googleads.g.doubleclick.net https://analytics.aimediagroup.com https://maps.googleapis.com https://snap.licdn.com https://js-agent.newrelic.com https://bam.nr-data.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://public.tableau.com https://platform.twitter.com https://cdn.syndication.twimg.com https://syndication.twitter.com https://static.hotjar.com https://script.hotjar.com https://static.cloud.coveo.com https://siteimproveanalytics.com https://www.clarity.ms https://players.brightcove.net https://vjs.zencdn.net https://tagassistant.google.com https://unpkg.com/aos@next/ https://js.zi-scripts.com https://ss-extras.millimanfunds.com https://cxppusa1rdrect01sa02cdn-endpoint.azureedge.net https://cxppusa1rdrect01sa02cdn.blob.core.windows.net https://public.flourish.studio https://rdrect-usa1.mkt.dynamics.com; img-src 'self' data: https://*.milliman.com https://assets.buzzsprout.com https://www.google-analytics.com https://www.googletagmanager.com https://bat.bing.com https://cf-images.us-east-1.prod.boltdns.net https://analytics.aimediagroup.com https://milliman.aiproxies.com https://www.google.com https://www.google.ca https://match.adsrvr.org https://maps.googleapis.com https://maps.gstatic.com *.googleapis.com *.ggpht https://px.ads.linkedin.com https://www.linkedin.com https://p.adsymptotic.com https://googleads.g.doubleclick.net https://cdn.cookielaw.org https://www.youtube.com https://public.tableau.com https://syndication.twitter.com https://pbs.twimg.com https://platform.twitter.com https://ton.twimg.com https://*.siteimproveanalytics.io https://metrics.brightcove.com https://edge.sitecorecloud.io https://*.sitecorecloud.io https://fonts.gstatic.com https://px4.ads.linkedin.com https://dashboard.aidps.xyz; style-src 'self' 'unsafe-inline' https://*.milliman.com https://fonts.googleapis.com https://cloud.typenetwork.com https://assets.buzzsprout.com https://platform.twitter.com https://ton.twimg.com https://edge-platform.sitecorecloud.io https://www.googletagmanager.com https://unpkg.com/aos@next/ https://ss-extras.millimanfunds.com; font-src 'self' 'unsafe-inline' data: https://*.milliman.com https://fonts.gstatic.com https://cloud.typenetwork.com https://ton.twimg.com https://fastly-cloud.typenetwork.com; frame-src 'self' https://webforms-qa.milliman.com https://webforms.milliman.com https://www.arcgis.com https://*.milliman.com https://players.brightcove.net https://www.buzzsprout.com https://insight.adsrvr.org https://app.powerbi.com https://js.driftt.com https://milliman.maps.arcgis.com https://*.makeaclickablemap.com https://makeaclickablemap.com https://www.google.com https://assets.milliman.com https://milliman-milwaukee-reports.azurewebsites.net https://td.doubleclick.net/ https://twitter.com https://platform.twitter.com https://html5-player.libsyn.com https://bid.g.doubleclick.net https://www.youtube.com https://public.tableau.com https://vars.hotjar.com https://syndication.twitter.com https://milliman.aiproxies.com https://*.vimeo.com https://app.netlify.com/ https://www.googletagmanager.com https://flo.uri.sh/; child-src 'self' https://webforms-qa.milliman.com https://webforms.milliman.com https://*.milliman.com https://players.brightcove.net https://www.buzzsprout.com https://app.powerbi.com https://milliman.maps.arcgis.com https://*.makeaclickablemap.com https://makeaclickablemap.com https://www.google.com https://assets.milliman.com https://milliman-milwaukee-reports.azurewebsites.net https://twitter.com https://www.twitter.com html5-player.libsyn.com https://bid.g.doubleclick.net blob:; connect-src 'self' https://*.sitecorecloud.io https://*.milliman.com https://cdn.linkedin.oribi.io https://px.ads.linkedin.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://edge-platform.sitecorecloud.io https://assets5.lottiefiles.com https://*.analytics.org.coveo.com https://*.clarity.ms https://lottie.host https://assets9.lottiefiles.com https://millimannonproduction1gm81sp5s.org.coveo.com https://millimannonproduction1gm81sp5s.analytics.org.coveo.com https://millimanproductionmo4t0l69.org.coveo.com https://millimanproductionmo4t0l69.analytics.org.coveo.com https://www.google-analytics.com https://stats.g.doubleclick.net https://bat.bing.com https://pnapi.invoca.net https://bam.nr-data.net https://privacyportal.onetrust.com https://usageanalytics.coveo.com https://platform.cloud.coveo.com https://www.milliman.com https://us.milliman.com wss://*.hotjar.com https://*.hotjar.com https://*.hotjar.io https://maps.googleapis.com https://milliman.aiproxies.com https://secure.adnxs.com https://edge.api.brightcove.com https://*.boltdns.net https://*.akamaihd.net https://edge.sitecorecloud.io https://www.google.com https://*.brightcovecdn.com https://js.zi-scripts.com https://ws.zoominfo.com https://ss-extras.millimanfunds.com https://mobile.events.data.microsoft.com https://public.flourish.studio https://rdrect-usa1.mkt.dynamics.com https://mobile.events.data.microsoft.com; media-src 'self' https://*.milliman.com https://manifest.prod.boltdns.net https://bcbolt446c5271-a.akamaihd.net https://*.brightcovecdn.com blob:; frame-ancestors 'self' https://*.sitecorecloud.io https://pages.sitecorecloud.io; upgrade-insecure-requests; block-all-mixed-content;

Strict-Transport-Security

max-age=7776000; includeSubDomains

X-Frame-Options

Not sent

X-Content-Type-Options

nosniff

Referrer-Policy

Not sent

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://milliman.com/HTTP 301

   → https://milliman.com/

2. 2.https://milliman.com/HTTP 301

   → https://www.milliman.com/

3. 3.https://www.milliman.com/HTTP 302

   → https://us.milliman.com/en/

4. 4.https://us.milliman.com/en/HTTP 200

Meta tags

Title

Milliman | US | Solutions for a world at risk

Description

A worldwide provider of actuarial and related products and services, we help our clients protect the health and financial well-being of people everywhere.

Canonical

https://us.milliman.com/en/

Robots

Not set

Generator

Not set

Open Graph title

Not set

Open Graph description

Not set

Open Graph image

https://assets.milliman.com/downloads/Millimanillustration090generalbusiness.jpg

Open Graph type

Not set

Twitter card

Not set

Twitter title

Not set

Twitter image

https://assets.milliman.com/downloads/Millimanillustration090generalbusiness.jpg

robots.txt

Disallow rules (User-agent: *)

21

Disallow rules (other agents)

30

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Next.jsframework

  Found "_next/static/" in the page's HTML

• Cloudflare Bot Managementcdn

  Cookie set: __cf_bm

Related domains