mindwork.it

Live preview

This site sends "X-Frame-Options: DENY, SAMEORIGIN", which blocks embedding it here.

Since mindwork.it can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

private, no-cache, no-store, max-age=0, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://js.stripe.com https://connect-js.stripe.com https://snap.licdn.com https://cdn.iubenda.com https://cs.iubenda.com https://*.ingest.sentry.io https://static.zdassets.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com 'sha256-0hAheEzaMe6uXIKV4EehS9pu1am1lj/KnnzrOYqckXk='; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline'; img-src 'self' data: https://mindwork.it https://www.mindwork.it https://cdn.mindwork.it https://px.ads.linkedin.com https://www.google-analytics.com https://www.googletagmanager.com https://*.amazonaws.net https://*.cloudfront.net https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' http://localhost:3000 http://localhost:8080 https://www.google-analytics.com https://*.google-analytics.com https://region1.google-analytics.com https://*.ingest.sentry.io https://js.stripe.com https://api.stripe.com https://snap.licdn.com https://px.ads.linkedin.com https://*.zendesk.com https://ekr.zdassets.com https://idb.iubenda.com https://cpl.iubenda.com https://*.sfu.whereby.com https://*.sfu.svc.whereby.com https://*.srv.whereby.com https://*.svc.whereby.com https://*.appearin.net https://*.turn.whereby.com https://*.turn.svc.whereby.com wss://*.sfu.whereby.com wss://*.sfu.svc.whereby.com wss://*.srv.whereby.com wss://*.svc.whereby.com wss://*.appearin.net; frame-src 'self' https://www.youtube.com https://youtube.com https://*.youtube.com https://www.youtube-nocookie.com https://youtube-nocookie.com https://*.youtube-nocookie.com https://vimeo.com https://*.vimeo.com https://player.vimeo.com https://js.stripe.com https://connect-js.stripe.com https://hooks.stripe.com https://*.iubenda.com https://*.zendesk.com https://*.whereby.com https://*.appearin.net; media-src 'self' https://www.youtube.com; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests, frame-ancestors 'self'

Strict-Transport-Security

max-age=31536000; includeSubDomains; preload, max-age=31536000; includeSubDomains; preload, max-age=15552000

X-Frame-Options

DENY, SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

strict-origin-when-cross-origin

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://mindwork.it/HTTP 301

   → https://mindwork.it/

2. 2.https://mindwork.it/HTTP 200

Meta tags

Title

Mindwork | Benessere psicologico per le aziende | Psicologo online

Description

Well-being in progress

Canonical

Not set

Robots

Not set

Generator

Not set

Open Graph title

Mindwork | Benessere psicologico per le aziende | Psicologo online

Open Graph description

Well-being in progress

Open Graph image

Not set

Open Graph type

Not set

Twitter card

summary

Twitter title

Mindwork | Benessere psicologico per le aziende | Psicologo online

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

3

Disallow rules (other agents)

0

No Sitemap declared in robots.txt.

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Next.jsframework

  X-Powered-By: Next.js

• Google Tag Manageranalytics

  Found "googletagmanager.com/gtm.js" in the page's HTML

Related domains