pract.is

Live preview

This site sends "X-Frame-Options: DENY, SAMEORIGIN", which blocks embedding it here.

Since pract.is can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

s-maxage=31536000, stale-while-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self' 'unsafe-eval' 'wasm-unsafe-eval' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: https://js.stripe.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.google https://cdnjs.cloudflare.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://js.stripe.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.google https://cdnjs.cloudflare.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https: wss: https://discord.com; media-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; frame-src https://js.stripe.com https://*.google.com https://*.google https://discord.com https://*.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://open.spotify.com https://*.doubleclick.net https://*.googlesyndication.com https://*.adtrafficquality.google; block-all-mixed-content; upgrade-insecure-requests

Strict-Transport-Security

max-age=31536000; includeSubDomains; preload

X-Frame-Options

DENY, SAMEORIGIN

X-Content-Type-Options

nosniff, nosniff

Referrer-Policy

strict-origin-when-cross-origin, no-referrer-when-downgrade

Permissions-Policy

geolocation=(), microphone=(self), camera=(self), magnetometer=(), gyroscope=(), usb=()

What each security header does

Redirect chain

1. 1.http://pract.is/HTTP 301

   → https://pract.is/

2. 2.https://pract.is/HTTP 200

Meta tags

Title

Practis | Music Practice Diary, Timer & Sheet Music

Description

Track music practice with Cue, organise repertoire and sheet music, and plan sessions with timers, a weekly planner and a practice diary. Web, iOS & Android.

Canonical

https://pract.is

Robots

max-image-preview:large

Generator

Not set

Open Graph title

Practis | Music Practice Diary, Timer & Sheet Music

Open Graph description

Track music practice with Cue, organise repertoire and sheet music, and plan sessions with timers, a weekly planner and a practice diary. Web, iOS & Android.

Open Graph image

https://pract.is/marketing/home-social-phone.jpg

Open Graph type

website

Twitter card

summary_large_image

Twitter title

Practis | Music Practice Diary, Timer & Sheet Music

Twitter image

https://pract.is/marketing/home-social-phone.jpg

robots.txt

Disallow rules (User-agent: *)

6

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Next.jsframework

  X-Powered-By: Next.js

• Google Analyticsanalytics

  Found "googletagmanager.com/gtag/js" in the page's HTML

Related domains