waitwhat.com

Live preview

This site sends "X-Frame-Options: sameorigin", which blocks embedding it here.

Since waitwhat.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=UTF-8

Cache-Control

max-age=15552000, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'none'; script-src 'self' 'unsafe-eval' *.cloudflareinsights.com *.youtube.com *.doubleclick.net *.licdn.com *.adtrafficquality.google *.googlesyndication.com *.workable.com *.cloudfront.net *.clarity.ms *.hotjar.com *.hsadspixel.net *.hubspot.com *.hsforms.net *.hsforms.com *.hs-scripts.com *.hs-analytics.net *.hscollectedforms.net *.hs-banner.com *.hscta.net *.art19.com *.hellowaitwhat.com *.facebook.net *.facebook.com *.google-analytics.com *.google.com *.googletagmanager.com *.firebaseapp.com *.stripe.com *.tinypass.com *.cloudfunctions.net https://ausi.github.io/ *.twitter.com 'sha256-cU4OTpsuisE/RgysBGeMmZipcdnzg1Jy4A59OO+/PBw=' 'sha256-bMTESW9hEQ+7NIw+F0ql6ihmNczfsRcvvel3nLwWsrE=' 'sha256-LFHbZ8bfRwJUQDsNK2cFv+qXu1xmOw8ewfzkEWzmQy8='; font-src 'self' *.art19.com data: *.hellowaitwhat.com *.gstatic.com; img-src 'self' data: *.linkedin.com *.adtrafficquality.google *.googlesyndication.com *.ytimg.com https://images.squarespace-cdn.com *.bing.com *.clarity.ms *.hsforms.net *.hsforms.com *.hubspot.com *.hscta.net *.art19.com *.hellowaitwhat.com *.facebook.net *.facebook.com *.google-analytics.com *.doubleclick.net *.google.com *.firebaseapp.com *.stripe.com https://ausi.github.io/ *.googletagmanager.com *.vimeocdn.com; object-src 'none'; style-src 'self' 'unsafe-inline' *.art19.com *.hellowaitwhat.com *.google.com *.googleapis.com; frame-src 'self' *.googletagmanager.com *.adtrafficquality.google *.doubleclick.net *.googlesyndication.com *.youtube.com *.art19.com *.hellowaitwhat.com *.hsforms.com *.hs-sites.com *.facebook.net *.facebook.com *.stripe.com *.tinypass.com *.google.com *.firebaseapp.com https://ausi.github.io/ *.twitter.com *.vimeo.com *.spotify.com; form-action 'self' waitwhat.com *.hellowaitwhat.com hellowaitwhat.com *.hsforms.com *.list-manage.com *.facebook.net *.facebook.com; frame-ancestors 'self'; base-uri 'self'; manifest-src 'self'; connect-src 'self' *.hsappstatic.net google.com *.gstatic.com *.google.com *.stape.gl *.stape.st *.linkedin.com *.adtrafficquality.google *.hubapi.com *.hsadspixel.net *.hubspot.com *.hscta.net *.googlesyndication.com *.clarity.ms wss://ws.hotjar.com *.hotjar.com *.hotjar.io *.hsforms.net *.hsforms.com *.hscollectedforms.net *.hs-banner.com *.art19.com *.sentry-cdn.com *.sentry.io *.stripe.com *.piano.io *.google-analytics.com *.googleapis.com *.google.com *.doubleclick.net *.tinypass.com *.facebook.com *.firebaseapp.com *.cloudfunctions.net; media-src 'self' *.mastersofscale.com waitwhat.com *.waitwhat.com *.hellowaitwhat.com *.art19.com;

Strict-Transport-Security

max-age=31536000; includeSubDomains; preload

X-Frame-Options

sameorigin

X-Content-Type-Options

nosniff

Referrer-Policy

strict-origin-when-cross-origin

Permissions-Policy

accelerometer=(self "https://www.youtube.com"), ambient-light-sensor=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(self "https://www.youtube.com" "https://embed-cdn.spotifycdn.com"), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(self "https://www.youtube.com"), geolocation=(), gyroscope=(self "https://www.youtube.com"), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(self "https://js.stripe.com"), picture-in-picture=(self "https://www.youtube.com"), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()

What each security header does

Redirect chain

1. 1.http://waitwhat.com/HTTP 301

   → https://waitwhat.com/

2. 2.https://waitwhat.com/HTTP 200

Meta tags

Title

Home - WaitWhat

Description

Our mission is to provide people with the ideas, information, and inspiration they need to live their best lives at work.

Canonical

https://waitwhat.com/

Robots

index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1

Generator

Not set

Open Graph title

Home - WaitWhat

Open Graph description

Our mission is to provide people with the ideas, information, and inspiration they need to live their best lives at work.

Open Graph image

Not set

Open Graph type

website

Twitter card

summary_large_image

Twitter title

Not set

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

0

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• WordPresscms

  Found "wp-content/" in the page's HTML

• Google Analyticsanalytics

  Found "googletagmanager.com/gtag/js" in the page's HTML

• HubSpotanalytics

  Found "js.hs-scripts.com" in the page's HTML

Related domains