wealthsimple.com

Live preview

This site's Content-Security-Policy restricts embedding to specific origins ("frame-ancestors 'self' https://my.wealthsimple.com https://app.contentful.com https://*.builds.wealthsimple.com"), which does not include StatsMyWeb.

Since wealthsimple.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

public, max-age=0, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self'; base-uri 'self'; object-src 'none'; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' blob: data: https://*.wealthsimple.com https://api.statsig.com https://featuregates.org https://statsigapi.net https://events.statsigapi.net https://api.statsigcdn.com https://featureassets.org https://assetsconfigcdn.org https://prodregistryv2.org https://cloudflare-dns.com https://beyondwickedmapping.org https://*.fullstory.com https://*.decagon.ai https://*.google.ca https://*.google.com https://*.google.co.uk https://*.googleadservices.com https://*.jitsu.com https://*.maze.co https://*.reddit.com https://*.redditstatic.com https://*.sentry.io https://*.ingest.sentry.io https://*.snapchat.com https://*.tiktokw.us https://*.vaultdcr.com https://analytics.tiktok.com https://analytics.twitter.com https://t.co https://google.com https://*.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://insight.adsrvr.org https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://ad.doubleclick.net https://www.facebook.com https://wealthsimple.sjv.io https://*.zi-scripts.com https://ws.zoominfo.com https://aorta.clickagy.com https://hemsync.clickagy.com https://*.meticulous.ai https://browser.sentry-cdn.com https://cognito-identity.us-west-2.amazonaws.com https://user-events-v3.s3-accelerate.amazonaws.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net/gh/paulirish/lite-youtube-embed@master/src/ https://tagmanager.google.com; img-src 'self' blob: data: https://images.ctfassets.net/v44fuld738we/ https://www.facebook.com https://www.google.ca https://www.google.com https://www.google.co.uk https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://ssl.gstatic.com https://www.gstatic.com https://alb.reddit.com https://analytics.twitter.com https://analytics.tiktok.com https://*.tiktokw.us https://bat.bing.com https://tr.snapchat.com https://t.co https://i.ytimg.com https://segment.prod.bidr.io https://aorta.clickagy.com; media-src 'self' https://videos.ctfassets.net/v44fuld738we/; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' blob: https://*.jitsu.com https://*.fullstory.com https://bat.bing.com https://*.doubleclick.net https://analytics.tiktok.com/ https://connect.facebook.net https://d.impactradius-event.com https://d2hrivdxn8ekm8.cloudfront.net https://decagon.ai https://js.adsrvr.org https://sc-static.net https://snippet.maze.co https://static.ads-twitter.com https://tr.snapchat.com https://view.ceros.com https://*.googletagmanager.com https://tagmanager.google.com https://www.gstatic.com https://www.redditstatic.com https://maps.googleapis.com https://challenges.cloudflare.com https://*.zi-scripts.com https://tags.clickagy.com https://cdn.jsdelivr.net/gh/paulirish/lite-youtube-embed@master/src/ https://www.youtube.com https://snippet.meticulous.ai https://browser.sentry-cdn.com; worker-src 'self' blob:; frame-src 'self' https://decagon.ai https://view.ceros.com/wealthsimple/ https://www.youtube.com https://www.youtube-nocookie.com https://*.adsrvr.org https://www.googletagmanager.com https://tr.snapchat.com https://hemsync.clickagy.com https://form.typeform.com https://player.simplecast.com https://challenges.cloudflare.com https://www.cdn.wealthsimple.com https://snippet.meticulous.ai; frame-ancestors 'self' https://my.wealthsimple.com https://app.contentful.com https://*.builds.wealthsimple.com; upgrade-insecure-requests ; report-to csp-endpoint; report-uri /api/csp-report;

Strict-Transport-Security

max-age=31536000; includeSubDomains

X-Frame-Options

Not sent

X-Content-Type-Options

Not sent

Referrer-Policy

Not sent

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://wealthsimple.com/HTTP 301

   → https://wealthsimple.com/

2. 2.https://wealthsimple.com/HTTP 301

   → https://www.wealthsimple.com/

3. 3.https://www.wealthsimple.com/HTTP 302

   → https://www.wealthsimple.com/en-ca/

4. 4.https://www.wealthsimple.com/en-ca/HTTP 308

   → https://www.wealthsimple.com/en-ca

5. 5.https://www.wealthsimple.com/en-caHTTP 200

Meta tags

Title

Wealthsimple | More is more

Description

Being better than a bank means more of everything. Spend, trade and invest with Wealthsimple.

Canonical

https://www.wealthsimple.com/en-ca

Robots

index

Generator

Not set

Open Graph title

Wealthsimple | More is more

Open Graph description

Being better than a bank means more of everything. Spend, trade and invest with Wealthsimple.

Open Graph image

https://www.wealthsimple.com/cdn-cgi/image/format=auto,quality=75,width=1200,fit=scale-down/https:/images.ctfassets.net/v44fuld738we/1GC3xyCGopxSUKLI0l3Ll8/c555117f54e26d34a1b4332f19d7ff6b/Meta_EN.png

Open Graph type

Not set

Twitter card

summary_large_image

Twitter title

Wealthsimple | More is more

Twitter image

https://www.wealthsimple.com/cdn-cgi/image/format=auto,quality=75,width=1200,fit=scale-down/https:/images.ctfassets.net/v44fuld738we/1GC3xyCGopxSUKLI0l3Ll8/c555117f54e26d34a1b4332f19d7ff6b/Meta_EN.png

robots.txt

Disallow rules (User-agent: *)

8

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

• Next.jsframework

  Found "_next/static/" in the page's HTML

Related domains