Summary
A Concise Overview of the scan result of url https://vercel.com/login?next=%2Fsso-api%3Furl%3Dhttps%253A%252F%252Fpostonarota.com%252F%26nonce%3D4e839c4de0dae9eff08df2bae106209ec32c86bd139851cdeb31b26a4f971959
- Document
- HTML
- 5
- StyleSheets
- 10
- Scripts
- 86
- Font
- 3
- Images
- 8
- Links
- 0
- JavaScript Variables
- 53
- Console log messages
- 0
- Network
- Requests
- 122
- Bytes Transferred
- 2.2MB
- Bytes Total
- 6.31MB
- DNS Record
- A Record
- 2
- Technology
- CMS
- 1
- Webmail
- 1
- Programming languages
- 1
- CRM
- 1
- Authentication
- 1
- PaaS
- 2
- Payment processors
- 1
- JavaScript frameworks
- 2
- Web frameworks
- 1
- Analytics
- 2
- Security
- 2
- 2
- Livestreaming
- 1
- Miscellaneous
- 2
Document
Links
The outgoing links identified from the page.
| Link | Text |
|---|
JavaScript Variables
Global JavaScript variables are variables that are defined outside of any function or block scope in JavaScript.
Technology
The technologies identified are present on the scanned URL.
| Name | Description | Detected patterns |
|---|---|---|
| CMS | ||
Contentful | Contentful is an API-first content management platform to create, manage and publish content on any digital channel. | Type: html Regex: <[^>]{1,250}(?:assets|downloads|images|videos)\.(?:ct?fassets\.net|contentful\.com) |
| Analytics | ||
| Sift is a CA-based fraud prevention company. | Type: scriptSrc Regex: cdn\.sift(?:science)?\.com\/s\.js | |
Mixpanel | Mixpanel provides a business analytics service. It tracks user interactions with web and mobile applications and provides tools for targeted communication with them. Its toolset contains in-app A/B tests and user survey forms. | Type: dns Regex: mixpanel-domain-verify |
| JavaScript frameworks | ||
React | React is an open-source JavaScript library for building user interfaces or UI components. | Dependent on Next.js |
Next.js | Next.js is a React framework for developing single page Javascript applications. | Type: headers Name: x-powered-by Regex: ^Next\.js ?([0-9.]{1,250})? |
| Security | ||
| Sift is a CA-based fraud prevention company. | Type: scriptSrc Regex: cdn\.sift(?:science)?\.com\/s\.js | |
| HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. | Type: headers Name: strict-transport-security Regex: (?:) | |
| Web frameworks | ||
Next.js | Next.js is a React framework for developing single page Javascript applications. | Type: headers Name: x-powered-by Regex: ^Next\.js ?([0-9.]{1,250})? |
| Miscellaneous | ||
Webpack | Webpack is an open-source JavaScript module bundler. | Dependent on Next.js |
DocuSign | DocuSign allows organisations to manage electronic agreements. | Type: dns Regex: docusign |
| Programming languages | ||
Node.js | Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser. | Dependent on Next.js |
| Webmail | ||
Apple iCloud Mail | Apple iCloud Mail is a webmail service provided by Apple, Inc. | Type: dns Regex: apple-domain |
| Payment processors | ||
Stripe | Stripe offers online payment processing for internet businesses as well as fraud prevention, invoicing and subscription management. | Type: dns Regex: stripe-verification= |
| CRM | ||
Salesforce | Salesforce is a cloud computing service software (SaaS) that specializes in customer relationship management (CRM). | Type: dns Regex: salesforce\.com |
| PaaS | ||
Amazon Web Services | Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. | Dependent on Amazon SES |
Vercel | Vercel is a cloud platform for static frontends and serverless functions. | Type: headers Name: x-vercel-id Regex: ^now|Vercel$ |
| Authentication | ||
Google Sign-in | Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account. | Type: scriptSrc Regex: accounts\.google\.com\/gsi\/client |
Sendgrid | SendGrid is a cloud-based email delivery platform for transactional and marketing emails. | Type: dns Regex: sendgrid\.net |
Amazon SES | Amazon Simple Email Service (SES) is an email service that enables developers to send mail from within any application. | Type: dns Regex: amazonses\.com |
| Livestreaming | ||
Type: dns Regex: loom-verification | ||
Performance
The speed and efficiency of the scanned URL loads and displays its content.
- dns
- 1 msGood
- tcp
- 1 msGood
- requestTime
- 101 msGood
- dom
- 1140 msPoor
DNS Record
A DNS record maps a domain name to an IP address or other resource information.
| Type | Name | Content | DNSSEC |
|---|---|---|---|
| A | vercel.com | 64.239.109.1 | no |
| A | vercel.com | 64.239.109.129 | no |
SSL Certificate
An SSL certificate is a digital certificate that verifies the authenticity and encrypts the communication between a website and its visitors.
| Subject | Issue date | Expiry date | Valid |
|---|---|---|---|
vercel.com | 10/5/2026 | 10/6/2027 | 1 year 1 day |
accounts.google.com | 10/5/2026 | 10/6/2027 | 1 year 1 day |
o205439.ingest.sentry.io | 10/5/2026 | 10/6/2027 | 1 year 1 day |
HTTP Headers
HTTP Header
An HTTP header is a component of an HTTP request or response that contains additional information about the message being sent or received.
| Name | Value |
|---|---|
| Access-Control-Allow-Origin | * |
| Age | 702 |
| Cache-Control | public, max-age=0, must-revalidate |
| Content-Disposition | inline |
| Content-Encoding | br |
| Content-Security-Policy | default-src 'self' vercel.com *.vercel.com *.vercel.sh vercel.live *.stripe.com twitter.com *.twitter.com *.google.com *.github.com *.codesandbox.io https://risk.clearbit.com wss://*.vercel.com localhost:* chrome-extension://*;script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: www.google.com www.gstatic.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.twimg.com cdn.ampproject.org *.googleapis.com *.fides-cdn.ethyca.com *.ethyca.com cdn.ethyca.com cdn.vercel-insights.com va.vercel-scripts.com cdp.vercel.com vercel.com *.vercel.com *.vercel.sh vercel.live *.stripe.com twitter.com *.twitter.com *.google.com *.github.com *.codesandbox.io https://risk.clearbit.com wss://*.vercel.com localhost:* chrome-extension://*;child-src *.youtube.com *.youtube-nocookie.com *.stripe.com www.google.com github.com calendly.com *.vusercontent.net *.vercel.run *.tmp.now vercel.com *.vercel.com *.vercel.sh vercel.live *.stripe.com twitter.com *.twitter.com *.google.com *.github.com *.codesandbox.io https://risk.clearbit.com wss://*.vercel.com localhost:* chrome-extension://*;style-src 'self' 'unsafe-inline' *.googleapis.com vercel.com *.vercel.com *.vercel.sh vercel.live *.stripe.com twitter.com *.twitter.com *.google.com *.github.com *.codesandbox.io https://risk.clearbit.com wss://*.vercel.com localhost:* chrome-extension://*;img-src * blob: data:;media-src 'self' videos.ctfassets.net user-images.githubusercontent.com replicate.delivery *.public.blob.vercel-storage.com *.private.blob.vercel-storage.com blob: data: vercel.com *.vercel.com *.vercel.sh vercel.live *.stripe.com twitter.com *.twitter.com *.google.com *.github.com *.codesandbox.io https://risk.clearbit.com wss://*.vercel.com localhost:* chrome-extension://*;connect-src wss://ws-us3.pusher.com data: * https://*.contentful.com cdp.vercel.com;font-src 'self' *.vercel.com *.gstatic.com vercel.live;frame-ancestors 'none';worker-src 'self' *.vercel.com blob: |
| Content-Type | text/html; charset=utf-8 |
| Cross-Origin-Opener-Policy | same-origin-allow-popups |
| Date | Tue, 06 Oct 2026 21:29:47 GMT |
| Feature-Policy | fullscreen 'self'; camera 'none' |
| Link | <https://avatars.githubusercontent.com>; rel=preconnect; crossorigin="", <https://py8fhxnkzwtsqdo9.public.blob.vercel-storage.com>; rel=preconnect; crossorigin="", <https://images.ctfassets.net>; rel=preconnect; crossorigin="", <https://accounts.google.com>; rel=preconnect; crossorigin="", </_next/static/immutable/media/797e433ab948586e.p.1v5bejj26fx9h.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/immutable/media/GeistPixel_Square.p.3ig4wtfmw09gh.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/immutable/media/Geist_Variable-s.p.2v-cf9syxr5ni.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2" |
| Referrer-Policy | origin-when-cross-origin |
| Server | Vercel |
| Strict-Transport-Security | max-age=31536000; includeSubDomains; preload |
| Transfer-Encoding | chunked |
| Vary | rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch |
| X-Content-Type-Options | nosniff |
| X-Dns-Prefetch-Control | on |
| X-Download-Options | noopen |
| X-Frame-Options | DENY |
| X-Matched-Path | /login |
| X-Nextjs-Prerender | 1 |
| X-Nextjs-Stale-Time | 300 |
| X-Vercel-Cache | HIT |
| X-Vercel-Id | pdx1::j4p45-1791322187582-24ab26ead856 |
| X-Xss-Protection | 0 |
Content Security Policy
Content Security Policy (CSP) is a security mechanism that helps prevent cross-site scripting (XSS) and other code injection attacks by specifying which content sources are allowed to be loaded on a web page.
| Name | Value |
|---|
Cookies
Cookies are small pieces of data stored on a user's web browser to track and remember information about their browsing activity on a website.
| Name | Value | Domain/Path | Expires | Secure | HTTP Only |
|---|---|---|---|---|---|
| _vercel_sso_nonce | e79b89591a999b483502512f38aa0aa1853523bcde90dd7c | postonarota.com/ | 10/6/2026, 10:29:47 PM | yes | yes |
| _v-visitor-id | 8CkafiGZMOMId5kDZaUt8 | .vercel.com/ | 1/4/2027, 9:29:47 PM | yes | no |
| _v-visitor-id-renewed | 1 | .vercel.com/ | 10/7/2026, 9:29:47 PM | yes | no |
| _v-consent | %7B%22essential%22%3Atrue%2C%22analytics%22%3Atrue%2C%22marketing%22%3Atrue%2C%22functional%22%3Atrue%2C%22version%22%3A1%7D | .vercel.com/ | 10/6/2027, 9:29:47 PM | yes | no |
| vercel_session_id | [vercel_session_id redacted] | vercel.com/ | 12/31/1969, 11:59:59 PM | no | no |
| g_state | [g_state redacted] | vercel.com/ | 4/4/2027, 9:29:48 PM | no | no |
| __ssid | 584a2050-746a-4933-bf93-2aebcad196e4 | .vercel.com/ | 11/10/2027, 9:29:49 PM | no | no |