rosshalfin.com website report

HTTP/2 200
date: Thu, 22 Oct 2026 07:32:26 GMT
content-type: text/html; charset=UTF-8
cf-ray: a4e6cedfeb757018-CDG
cf-cache-status: HIT
server-timing: cfCacheStatus;desc="HIT", cfEdge;dur=28,cfOrigin;dur=0,cfWorker;dur=24
age: 68682
cache-control: public, max-age=10800, s-maxage=86400
last-modified: Wed, 21 Oct 2026 11:45:29 GMT
link: </wp-content/themes/shoptimizer/assets/css/main/main.min.css>; rel=preload; as=style, <https://www.rosshalfin.com/wp-content/uploads/2024/08/ross-halfin-homepage-slider-jimmy-page-20090305-london.jpg>; rel=preload; as=image, <https://www.rosshalfin.com/cf-fonts/s/barlow-semi-condensed/5.0.18/latin/600/normal.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin
server: cloudflare
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: Accept-Encoding, X-Forwarded-Proto,Accept-Encoding
content-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self' https://app.malcare.com; frame-ancestors 'self';  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://js.stripe.com https://m.stripe.network   https://*.paypal.com https://*.paypalobjects.com https://pay.google.com   https://*.googletagmanager.com https://*.google-analytics.com   https://*.google.com https://*.gstatic.com   https://www.instagram.com https://static.cloudflareinsights.com   https://clarity.microsoft.com https://www.clarity.ms https://clarity.ms https://scripts.clarity.ms https://challenges.cloudflare.com;  script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://js.stripe.com https://m.stripe.network   https://*.paypal.com https://*.paypalobjects.com https://pay.google.com   https://*.googletagmanager.com https://*.google-analytics.com   https://*.google.com https://*.gstatic.com   https://www.instagram.com https://static.cloudflareinsights.com   https://clarity.microsoft.com https://www.clarity.ms https://clarity.ms https://scripts.clarity.ms https://challenges.cloudflare.com;  style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://m.stripe.network   https://hcaptcha.com https://*.hcaptcha.com;  font-src 'self' https://fonts.gstatic.com data:;  img-src 'self' data: blob: https: https://*.clarity.ms;  connect-src 'self' https://sourcemap.devowl.io https://*.googleapis.com https://www.google-analytics.com   https://*.googletagmanager.com https://*.google-analytics.com   https://*.paypal.com https://*.paypalobjects.com   https://js.stripe.com https://m.stripe.network https://pay.google.com   https://google.com https://www.google.com   https://*.cloudflareinsights.com https://www.instagram.com   https://clarity.microsoft.com https://*.clarity.ms   https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com;  frame-src 'self'   https://www.google.com https://www.paypal.com https://js.stripe.com https://m.stripe.network   https://pay.google.com   https://www.youtube.com https://player.vimeo.com https://www.instagram.com   https://hcaptcha.com https://*.hcaptcha.com   https://clarity.microsoft.com https://*.clarity.ms   https://app.malcare.com https://challenges.cloudflare.com;  worker-src 'self' blob:;
cross-origin-embedder-policy: unsafe-none
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
permissions-policy: geolocation=(self), microphone=(), camera=(), fullscreen=(), payment=(self "https://js.stripe.com" "https://pay.google.com" "https://gstatic.com" "https://apple.com" "https://www.paypal.com" "https://www.paypalobjects.com")
permitted-cross-domain-policies: none
x-dns-prefetch-control: on
x-oars-body-length: 337737
x-oars-cache: HIT
x-oars-cache-version: 20260723-phpinfo-purge
x-oars-worker: 05-main-cache-normalizer
expect-ct: max-age=86400, enforce
referrer-policy: strict-origin-when-cross-origin
x-cache-bypass: 0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-no-cache-on-set-cookie: 0
x-upstream-cache: MISS
x-xss-protection: 1; mode=block
speculation-rules: "/cdn-cgi/speculation"
content-encoding: zstd
alt-svc: h3=":443"; ma=86400