quadpay.com

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since quadpay.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

private, no-cache, no-store, max-age=0, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self' https://videos.ctfassets.net; script-src 'self' 'nonce-MjQyYmNmNjItNTg4NC00MWRlLTgwNWYtZDllM2E2YjVhMjg4' 'strict-dynamic' https://px.ads.linkedin.com https://zip.co https://*.clickagy.com https://dok.js-cdn.dynatrace.com https://snap.licdn.com https://connect.facebook.net https://bat.bing.com https://cdn.segment.com https://cdn.cookielaw.org https://*.onetrust.com https://js.zi-scripts.com https://*.zoominfo.com https://*.widget.insent.ai https://cdn.prod.uidapi.com https://www.google.com/recaptcha/ https://*.clarity.ms https://*.googletagmanager.com; script-src-elem 'self' 'nonce-MjQyYmNmNjItNTg4NC00MWRlLTgwNWYtZDllM2E2YjVhMjg4' 'strict-dynamic' https://px.ads.linkedin.com https://zip.co; style-src 'self' 'unsafe-inline' https://zip.co https://static.zip.co https://cdn.cookielaw.org https://*.onetrust.com; img-src 'self' blob: data: https://res.cloudinary.com https://images.ctfassets.net https://ctfassets.zip.co https://*.googletagmanager.com https://*.google-analytics.com https://px.ads.linkedin.com https://www.facebook.com https://www.google.com/pagead/ https://googleads.g.doubleclick.net https://cm.g.doubleclick.net https://bat.bing.com https://static.intercomassets.com https://js.intercomcdn.com https://downloads.intercomcdn.com https://www.linkedin.com https://*.clickagy.com https://us-u.openx.net https://idsync.rlcdn.com https://p.veritone-ce.com https://i.liadm.com https://arttrk.com https://zip.co https://px.ads.linkedin.com https://rp.liadm.com https://aorta.clickagy.com https://idx.liadm.com https://*.reddit.com https://cdn.cookielaw.org https://insight.adsrvr.org https://dpm.demdex.net https://pixel-sync.sitescout.com https://aa.agkn.com https://a.usbrowserspeed.com https://www.google.gg https://www.googleadservices.com https://*.clarity.ms https://c.bing.com https://www.google.com/ccm/collect https://*.doubleclick.net https://*.googlesyndication.com; font-src 'self' https://static.zip.co https://fonts.gstatic.com https://fonts.intercomcdn.com https://px.ads.linkedin.com; connect-src 'self' https://zip.co https://site.us.zip.co https://zipsite.dev.us.zip.co https://cdn.optimizely.com https://cdn.segment.com https://api.segment.io https://logx.optimizely.com https://*.google-analytics.com https://*.analytics.google.com https://px.ads.linkedin.com https://www.google.com/pagead/ https://google.com/pagead/ https://analytics.tiktok.com https://js.zi-scripts.com https://*.zoominfo.com https://*.widget.insent.ai https://*.prod.uidapi.com https://prod.uidapi.com https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io https://bf53439ypj.bf.dynatrace.com https://*.clickagy.com https://www.googleadservices.com https://*.tiktokw.us https://www.facebook.com https://*.pardot.com https://insight.adsrvr.org https://rp.liadm.com https://aorta.clickagy.com https://idx.liadm.com https://*.reddit.com https://*.redditstatic.com https://cdn.cookielaw.org https://*.onetrust.com https://geolocation.onetrust.com https://api.dev.us.zip.co https://api.us.zip.co https://www.google.gg https://www.google.com/ccm/collect https://www.google.com/recaptcha/ https://*.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://*.clarity.ms https://c.bing.com https://pagead2.googlesyndication.com https://stats.g.doubleclick.net; worker-src 'self' blob:; object-src 'none'; frame-src 'self' https://www.youtube.com https://*.googletagmanager.com https://td.doubleclick.net https://*.adsrvr.org https://*.clickagy.com https://*.widget.insent.ai https://rp.liadm.com https://www.google.com; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests;

Strict-Transport-Security

max-age=31536000; preload

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

Not sent

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://quadpay.com/HTTP 301

   → https://zip.co/us/

2. 2.https://zip.co/us/HTTP 301

   → https://zip.co/us

3. 3.https://zip.co/usHTTP 200

Meta tags

Title

Buy Now, Pay Later Online & In-Store | Zip

Description

Buy now, pay later with Zip. Split eligible purchases into 2, 4, or 8 installments and shop online or in-store with flexible payment options.

Canonical

https://zip.co/us

Robots

Not set

Generator

Not set

Open Graph title

Buy Now, Pay Later Online & In-Store | Zip

Open Graph description

Buy now, pay later with Zip. Split eligible purchases into 2, 4, or 8 installments and shop online or in-store with flexible payment options.

Open Graph image

https://zip.co/us/opengraph-image.png?c059877f65e5f657

Open Graph type

Not set

Twitter card

summary

Twitter title

Buy Now, Pay Later Online & In-Store | Zip

Twitter image

https://zip.co/us/opengraph-image.png?c059877f65e5f657

robots.txt

quadpay.com has no robots.txt.

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Next.jsframework

  Found "_next/static/" in the page's HTML

• Google Tag Manageranalytics

  Found "googletagmanager.com/gtm.js" in the page's HTML

• Cloudflare Bot Managementcdn

  Cookie set: __cf_bm

Related domains