sparkpost.com website report

HTTP/1.1 301 Moved Permanently
Server: CloudFront, CloudFront, bird
Date: Mon, 11 May 2026 09:36:01 GMT, Mon, 11 May 2026 09:35:59 GMT, Mon, 11 May 2026 09:36:01 GMT
Content-Type: text/html, text/html
Content-Length: 167, 0, 919
Connection: close, close, close
Location: https://sparkpost.com/, https://bird.com/?sp=true
X-Cache: Redirect from cloudfront, Hit from cloudfront, Error from cloudfront
Via: 1.1 505bedb254e2a4a9b54f62aa2026791a.cloudfront.net (CloudFront), 1.1 c47a2112f2ba11dfde1f02cf42a6b3f0.cloudfront.net (CloudFront), 1.1 f44a750f1ab6eb0f24a3374b498e11d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: CDG52-P6, CDG52-P6, CDG54-P2
Alt-Svc: h3=":443"; ma=86400, h3=":443"; ma=86400
X-Amz-Cf-Id: FFPZ3Azm2vgJ3rjAWmmTSiTbSqQhv_S7MJnyko2sOO4U6j4QyoDhMQ==, ZPQdVgF4xRGum13dyRrDy-hkekoXEFpKKBaVqhPaGZe4Ih2hSM-O7A==, ZWHwWxYv5S-TYlObgsyYLCBEExSLMzledbuQHCtjkr2X50RYesJ39g==
X-Frame-Options: DENY, DENY, SAMEORIGIN
cache-control: max-age=86400, stale-while-revalidate=86400, stale-if-error=86400, max-age=86400, stale-while-revalidate=86400, stale-if-error=86400
Vary: Origin, Origin, Accept-Encoding
HTTP/1.1 301 Moved Permanently
Age: 2
Strict-Transport-Security: max-age=31536000, max-age=31536000; includeSubDomains; preload
HTTP/1.1 403 Forbidden
X-XSS-Protection: 0
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://connect.facebook.net https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://*.airwallex.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https: data: blob:; font-src 'self' data: https://fonts.gstatic.com https://fonts.openmaptiles.org; media-src 'self' blob:; connect-src 'self' https://cdn.jsdelivr.net https://bird.com https://*.bird.com wss://bird.com wss://*.bird.com wss://*.preview.bird.com https://*.s3.eu-west-1.amazonaws.com https://*.s3.eu-central-1.amazonaws.com https://*.s3.us-east-2.amazonaws.com https://*.s3.us-west-2.amazonaws.com https://basemaps.cartocdn.com https://api.open-meteo.com https://archive-api.open-meteo.com https://tiles.openfreemap.org https://api.frankfurter.app https://graph.facebook.com https://pricing.p.mbirdcdn.net https://*.airwallex.com https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://stats.g.doubleclick.net https://td.doubleclick.net https://www.googletagmanager.com https://www.google.com; frame-src 'self' blob: https://airwallex.com https://*.airwallex.com https://open.spotify.com https://www.youtube.com https://www.facebook.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://accounts.google.com; object-src 'none'; worker-src 'self' blob:; report-uri https://bird.com/api/csp-report; report-to csp-endpoint
X-Content-Type-Options: nosniff
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), hid=(), magnetometer=(), microphone=(), payment=(), screen-wake-lock=(), serial=(), sync-xhr=(), usb=()