Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 3.33.250.204 |
| Server Software | nginx |
| Compression | gzip |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 3.33.250.204
Server Software nginx
Compression gzip
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://herox.com:443 | 301 | HTTP/2 301 |
| 2 | https://www.herox.com/ | 200 | HTTP/2 200 |
#1 URL https://herox.com:443
HTTP Status Code 301
Status HTTP/2 301
#2 URL https://www.herox.com/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 3 ms |
| TCP Connect | 4.1 ms |
| TLS Handshake | 406.1 ms |
| Time To First Byte (TTFB) | 643.5 ms |
| Content Download | 1.8 ms |
| Total Response Time | 645.2 ms |
DNS Lookup 3 ms
TCP Connect 4.1 ms
TLS Handshake 406.1 ms
Time To First Byte (TTFB) 643.5 ms
Content Download 1.8 ms
Total Response Time 645.2 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000 |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Crowdsourcing Platform and Innovator Network | HeroX |
| Meta Description | HeroX is connecting problem solvers like you to innovative thinking and opportunities. A crowdsourcing innovation platform with a global partner network. |
| Canonical | https://www.herox.com/ |
| Open Graph Title | Crowdsourcing Platform and Innovator Network | HeroX |
| Open Graph Description | HeroX is connecting problem solvers like you to innovative thinking and opportunities. A crowdsourcing innovation platform with a global partner network. |
| Open Graph Image | https://d253pvgap36xx8.cloudfront.net/static/pages/home-a... |
Title Crowdsourcing Platform and Innovator Network | HeroX Meta Description HeroX is connecting problem solvers like you to innovative thinking and opportunities. A crowdsourcing innovation platform with a global partner network. Canonical https://www.herox.com/ Open Graph Title Crowdsourcing Platform and Innovator Network | HeroX Open Graph Description HeroX is connecting problem solvers like you to innovative thinking and opportunities. A crowdsourcing innovation platform with a global partner network. Open Graph Image https://d253pvgap36xx8.cloudfront.net/static/pages/home-a... Detected Technologies
| Technology | Google Analytics Google Tag Manager Cloudflare Nginx Node.js Hotjar HubSpot |
Technology Google Analytics Google Tag Manager Cloudflare Nginx Node.js Hotjar HubSpot
HTTP Headers
| Date
| Wed, 19 Aug 2026 22:05:57 GMT |
| Content-type
| text/html; charset=utf-8 |
| Server
| nginx |
| Vary
| X-Requested-With, Accept-Language, Cookie |
| Content-security-policy
| object-src 'none'; worker-src https://www.herox.com/service_worker.js blob:; report-uri https://www.herox.com/csp-report?version=17; script-src https://d253pvgap36xx8.cloudfront.net/static/ 'unsafe-eval' https://www.herox.com/offline https://www.herox.com/scripts/ 'sha256-mvoI8bu3Z9fs9xTbU+hy1N0yhqRIusvPgE2oZpk1wiQ=' 'nonce-xqV17JGPYsYMVdBn3cjd/dqnFwZcDa3v' https://maps.googleapis.com https://maps.gstatic.com https://civic.herox.com https://places.googleapis.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.ggpht.com https://*.googleusercontent.com blob: https://challenges.cloudflare.com https://cdn.breadbutter.io https://breadbutterprodcdnstor.blob.core.windows.net https://connect.facebook.net/en_US/fbevents.js https://*.quora.com www.google-analytics.com/analytics.js www.google.com/jsapi www.google.com/uds/ www.google.com/pagead/conversion_async.js www.googleadservices.com/pagead/conversion_async.js www.googleadservices.com/pagead/conversion/ googleads.g.doubleclick.net/pagead/viewthroughconversion/ www.google-analytics.com/gtm/js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://www.google-analytics.com/gtm/optimize.js www.googletagmanager.com/gtag/js www.googletagmanager.com/gtm.js platform.twitter.com/oct.js connect.facebook.net i.kissmetrics.com/i.js scripts.kissmetrics.com/e4c88d429fdfc6e4482d61a6b365a4c942edee9f.2.js static.zdassets.com ekr.zdassets.com *.zopim.com checkout.stripe.com/checkout.js *.hs-scripts.com/2589226.js js.hs-analytics.net js.hscollectedforms.net/collectedforms.js forms.hsforms.com js.hsforms.net js.hsleadflows.net js.hs-banner.com/v2/2589226/banner.js static.hotjar.com/c/ script.hotjar.com bat.bing.com/bat.js bat.bing.com/p/action/ www.clarity.ms/tag/uet/56001679 *.clarity.ms/s/ sjs.bizographics.com/insight.min.js snap.licdn.com secure.coat0tire.com/js/222092.js secure.coat0tire.com/Track/Capture.aspx www.redditstatic.com/ads/pixel.js static.ads-twitter.com/uwt.js analytics.twitter.com https://www.googletagmanager.com 'sha256-e1N9nI/iHCiLunFE9YnFPsisc88+wJqeeN36Ko9G/04=' 'sha256-KdhuWDkSQfhHQfHQZoS40i6MODMrhMgTIp9BsNwdo7w='; style-src https://d253pvgap36xx8.cloudfront.net/static/ 'unsafe-inline' https://fonts.googleapis.com https://maps.gstatic.com https://civic.herox.com https://fonts.googleapis.com translate.googleapis.com/translate_static/css/ https://cdn.breadbutter.io https://breadbutterprodcdnstor.blob.core.windows.net; frame-ancestors https://super.herox.com |
| X-content-type-options
| nosniff |
| X-xss-protection
| 1; mode=block |
| Content-language
| en |
| Set-cookie
| sessionid=blqzube4elez77mw7pbywnbk3s1l45c0; Domain=.herox.com; expires=Wed, 02 Sep 2026 22:05:57 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax; Secure |
| Strict-transport-security
| max-age=31536000 |
| Content-encoding
| gzip |
Meta Tags
| X-UA-Compatible | IE=Edge |
| Viewport | width=device-width,minimum-scale=1,initial-scale=1 |
| Apple-mobile-web-app-title | HeroX |
| Description | HeroX is connecting problem solvers like you to innovative thinking and opportunities. A crowdsourcing innovation platform with a global partner network. |
Date Wed, 19 Aug 2026 22:05:57 GMT
Content-type text/html; charset=utf-8
Server nginx
Vary X-Requested-With, Accept-Language, Cookie
Content-security-policy object-src 'none'; worker-src https://www.herox.com/service_worker.js blob:; report-uri https://www.herox.com/csp-report?version=17; script-src https://d253pvgap36xx8.cloudfront.net/static/ 'unsafe-eval' https://www.herox.com/offline https://www.herox.com/scripts/ 'sha256-mvoI8bu3Z9fs9xTbU+hy1N0yhqRIusvPgE2oZpk1wiQ=' 'nonce-xqV17JGPYsYMVdBn3cjd/dqnFwZcDa3v' https://maps.googleapis.com https://maps.gstatic.com https://civic.herox.com https://places.googleapis.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.ggpht.com https://*.googleusercontent.com blob: https://challenges.cloudflare.com https://cdn.breadbutter.io https://breadbutterprodcdnstor.blob.core.windows.net https://connect.facebook.net/en_US/fbevents.js https://*.quora.com www.google-analytics.com/analytics.js www.google.com/jsapi www.google.com/uds/ www.google.com/pagead/conversion_async.js www.googleadservices.com/pagead/conversion_async.js www.googleadservices.com/pagead/conversion/ googleads.g.doubleclick.net/pagead/viewthroughconversion/ www.google-analytics.com/gtm/js https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://www.google-analytics.com/gtm/optimize.js www.googletagmanager.com/gtag/js www.googletagmanager.com/gtm.js platform.twitter.com/oct.js connect.facebook.net i.kissmetrics.com/i.js scripts.kissmetrics.com/e4c88d429fdfc6e4482d61a6b365a4c942edee9f.2.js static.zdassets.com ekr.zdassets.com *.zopim.com checkout.stripe.com/checkout.js *.hs-scripts.com/2589226.js js.hs-analytics.net js.hscollectedforms.net/collectedforms.js forms.hsforms.com js.hsforms.net js.hsleadflows.net js.hs-banner.com/v2/2589226/banner.js static.hotjar.com/c/ script.hotjar.com bat.bing.com/bat.js bat.bing.com/p/action/ www.clarity.ms/tag/uet/56001679 *.clarity.ms/s/ sjs.bizographics.com/insight.min.js snap.licdn.com secure.coat0tire.com/js/222092.js secure.coat0tire.com/Track/Capture.aspx www.redditstatic.com/ads/pixel.js static.ads-twitter.com/uwt.js analytics.twitter.com https://www.googletagmanager.com 'sha256-e1N9nI/iHCiLunFE9YnFPsisc88+wJqeeN36Ko9G/04=' 'sha256-KdhuWDkSQfhHQfHQZoS40i6MODMrhMgTIp9BsNwdo7w='; style-src https://d253pvgap36xx8.cloudfront.net/static/ 'unsafe-inline' https://fonts.googleapis.com https://maps.gstatic.com https://civic.herox.com https://fonts.googleapis.com translate.googleapis.com/translate_static/css/ https://cdn.breadbutter.io https://breadbutterprodcdnstor.blob.core.windows.net; frame-ancestors https://super.herox.com
X-content-type-options nosniff
X-xss-protection 1; mode=block
Content-language en
Set-cookie sessionid=blqzube4elez77mw7pbywnbk3s1l45c0; Domain=.herox.com; expires=Wed, 02 Sep 2026 22:05:57 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax; Secure
Strict-transport-security max-age=31536000
Content-encoding gzip