passes.com

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since passes.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

public, max-age=0, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self'; connect-src 'self' https: wss: data: blob: *.posthog.com; font-src 'self' data:; frame-src 'self' applepay.cdn-apple.com elements.basistheory.com js.basistheory.com www.google.com pay.google.com www.paypal.com www.paypalobjects.com www.sandbox.paypal.com withpersona.com inquiry.withpersona.com www.printful.com cdn.plaid.com; frame-ancestors 'self'; img-src 'self' blob: data: https://cdnpasses.com www.paypal.com t.paypal.com www.sandbox.paypal.com www.paypalobjects.com www.gstatic.com applepay.cdn-apple.com storage.googleapis.com files.cdn.printful.com img.riskified.com media.tenor.com *.giphy.com pledgeling-res.cloudinary.com www.facebook.com alb.reddit.com static.ads-twitter.com ads-twitter.com ads-api.twitter.com analytics.twitter.com t.co; media-src 'self' blob: https://cdnpasses.com https://*.live-video.net *.giphy.com; script-src 'self' data: 'unsafe-eval' 'unsafe-inline' applepay.cdn-apple.com cdn.withpersona.com cwamerchantservices.transactiongateway.com files.cdn.printful.com js.basistheory.com pay.google.com storage.googleapis.com www.google.com www.gstatic.com www.paypal.com www.paypalobjects.com www.sandbox.paypal.com www.googletagmanager.com beacon.riskified.com www.clarity.ms connect.facebook.net static.ads-twitter.com ads-twitter.com ads-api.twitter.com analytics.twitter.com www.redditstatic.com analytics.passes.com *.posthog.com cdn.plaid.com; style-src 'self' 'unsafe-inline'; worker-src 'self' blob: data:; child-src 'self' blob:;

Strict-Transport-Security

max-age=63072000; includeSubDomains; preload

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

origin-when-cross-origin

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://passes.com/HTTP 301

   → https://www.passes.com/

2. 2.https://www.passes.com/HTTP 200

Meta tags

Title

Passes - a platform for creators to scale their content and own their audiences.

Description

Passes allows creators to monetize their content and build direct relationships with their audience through subscriptions, messaging, and exclusive content.

Canonical

https://www.passes.com/

Robots

follow, index

Generator

Not set

Open Graph title

Passes - a platform for creators to scale their content and own their audiences.

Open Graph description

Passes allows creators to monetize their content and build direct relationships with their audience through subscriptions, messaging, and exclusive content.

Open Graph image

https://www.passes.com/assets/open-graph/1200x630.png

Open Graph type

website

Twitter card

summary_large_image

Twitter title

Passes - a platform for creators to scale their content and own their audiences.

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

0

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Next.jsframework

  Found "_next/static/" in the page's HTML

Related domains