stream.co

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since stream.co can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

private, no-cache, no-store, max-age=0, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self'; base-uri 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.google-analytics.com https://*.hs-scripts.com https://*.hsadspixel.net https://*.hubspot.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.hs-banner.com https://static.cloudflareinsights.com https://acsbapp.com https://js.stripe.com https://*.hcaptcha.com https://*.wistia.com https://*.wistia.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com blob: https://*.wistia.com; img-src 'self' data: blob: https://stream.co https://www.googletagmanager.com https://*.google-analytics.com https://*.stripe.com https://*.hsforms.com https://www.gravatar.com https://*.wistia.com https://*.wistia.net; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api2.wagestream.xyz https://api.wagestream.xyz https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://*.hs-scripts.com https://*.hsadspixel.net https://*.hubspot.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.hs-banner.com https://static.cloudflareinsights.com https://api.stripe.com https://api.hsforms.com https://api.trustpilot.com https://acsbapp.com https://cdn.acsbapp.com https://fonts.googleapis.com https://*.hcaptcha.com https://m.stripe.com https://*.wistia.com https://*.wistia.net; frame-src 'self' https://prodweb-assets-4431cda0.s3.eu-west-2.amazonaws.com https://prodweb-assets-4431cda0.s3.amazonaws.com https://js.stripe.com https://hooks.stripe.com https://m.stripe.network https://b.stripecdn.com https://*.hcaptcha.com https://pay.google.com https://m.stripe.com https://fast.wistia.com https://fast.wistia.net https://app-static.wagestream.co.uk; worker-src 'self' blob:; form-action 'self'; frame-ancestors 'self'; object-src 'none'; media-src 'self' blob: https://prodweb-assets-4431cda0.s3.eu-west-2.amazonaws.com https://prodweb-assets-4431cda0.s3.amazonaws.com https://*.wistia.com https://*.wistia.net; manifest-src 'self'; upgrade-insecure-requests

Strict-Transport-Security

max-age=31536000; includeSubDomains; preload

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

strict-origin-when-cross-origin

Permissions-Policy

camera=(), microphone=(), geolocation=(), interest-cohort=()

What each security header does

Redirect chain

1. 1.http://stream.co/HTTP 301

   → https://stream.co/

2. 2.https://stream.co/HTTP 301

   → https://stream.co/en-us/

3. 3.https://stream.co/en-us/HTTP 308

   → https://stream.co/en-us

4. 4.https://stream.co/en-usHTTP 200

Meta tags

Title

Empowering Workers with Financial Wellbeing | Stream

Description

Stream empowers employees with easy access to their earnings, financial tools, and savings. Reduce financial stress, boost productivity and job satisfaction

Canonical

https://stream.co/en-us

Robots

index, follow

Generator

Not set

Open Graph title

Empowering Workers with Financial Wellbeing | Stream

Open Graph description

Stream empowers employees with easy access to their earnings, financial tools, and savings. Reduce financial stress, boost productivity and job satisfaction

Open Graph image

https://stream.co/api/media/file/Home_Hero_Left.webp

Open Graph type

website

Twitter card

summary_large_image

Twitter title

Empowering Workers with Financial Wellbeing | Stream

Twitter image

https://stream.co/api/media/file/Home_Hero_Left.webp

robots.txt

Disallow rules (User-agent: *)

6

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Next.jsframework

  Found "_next/static/" in the page's HTML

• Google Tag Manageranalytics

  Found "googletagmanager.com/gtm.js" in the page's HTML

• Cloudflare Bot Managementcdn

  Cookie set: __cf_bm

Related domains