No Security Risks Detected
This domain appears to be safe and secure
100%
Score
Disclaimer: This assessment is based on automated analysis of publicly available information. Results are for informational purposes only. For critical applications, consult security professionals.
Scan Information
Last checked:September 2, 2025 00:44:09
Target URL:https://bodycrush.io/
Scan Complete
Refresh page after 10 minutes
for updated results
Page Information
Target URL
https://bodycrush.io/
Page Title
BodyCount - Votre journal intime privé
Status
Active
Host Information
Domain
bodycrush.io
Server
Vercel
Country
United States
IP Address
64.29.17.65
ASN Information
16509
AMAZON-02
Technologies
Vercel
PaaS
HSTS
Security
SSL Certificate
HTTPS Enabled
Secure
Certificate Issuer
N/A
Valid From
2025-09-01 00:44:14
Valid Until
2026-09-02 00:44:14
Subject Name
bodycrush.io
Performance Statistics
49
Total Requests
1
Domains
1
IP Addresses
754.28 KB
Transfer Size
Content Size1.82 MB
HTTP Headers
Access-Control-Allow-Origin
*
Age
14983
Cache-Control
public, max-age=0, must-revalidate
Content-Disposition
inline
Content-Encoding
br
Content-Security-Policy-Report-Only
default-src 'self'; script-src 'self' 'unsafe-inline' https://js.stripe.com https://checkout.stripe.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://js.stripe.com https://checkout.stripe.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https: https://xrvafxvowvoxpxcefktx.supabase.co; media-src 'self' blob: https://xrvafxvowvoxpxcefktx.supabase.co; connect-src 'self' https://xrvafxvowvoxpxcefktx.supabase.co wss://xrvafxvowvoxpxcefktx.supabase.co https://api.stripe.com https://m.stripe.network https://r.stripe.com https://*.stripe.com https://api.openai.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://checkout.stripe.com; object-src 'none'; base-uri 'self'; form-action 'self' https://checkout.stripe.com; frame-ancestors 'none'; upgrade-insecure-requests ; block-all-mixed-content ; report-uri https://bodycount-app.vercel.app/api/csp-report; report-to csp-endpoint
Content-Type
text/html; charset=utf-8
Date
Tue, 02 Sep 2025 00:44:15 GMT
Etag
W/"8af53b21354e132bc0a5d5f216035282"
Permissions-Policy
camera=(), microphone=(), geolocation=()
Referrer-Policy
strict-origin-when-cross-origin
Report-To
{"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://bodycount-app.vercel.app/api/csp-report"}]}
Server
Vercel
Strict-Transport-Security
max-age=63072000; includeSubDomains; preload
Transfer-Encoding
chunked
Vary
RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch
X-Content-Type-Options
nosniff
X-Dns-Prefetch-Control
off
X-Frame-Options
DENY
X-Matched-Path
/
X-Nextjs-Prerender
1
X-Nextjs-Stale-Time
300
X-Vercel-Cache
HIT
X-Vercel-Id
sfo1::ct5qw-1756773854845-5bfb9bf78b6c
X-Xss-Protection
1; mode=block
25 headers detected
Technology Stack Analysis
Vercel
PaaS
Vercel is a cloud platform for static frontends and serverless functions.
HSTS
Security
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
External Links 3
Requested Domains 1
bodycrush.io
Unknown Type
No category information available