Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 104.17.176.98 |
| Server Software | cloudflare |
| CDN | Cloudflare |
| Compression | gzip |
|
🔒 🟡 Mixed Content (1 HTTP resources) | The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 104.17.176.98
Server Software cloudflare
CDN Cloudflare
Compression gzip
🔒 🟡 Mixed Content (1 HTTP resources) The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Performance
| DNS Lookup | 13.4 ms |
| TCP Connect | 15.3 ms |
| TLS Handshake | 7.4 ms |
| Time To First Byte (TTFB) | 38.4 ms |
| Content Download | 0.6 ms |
| Total Response Time | 39 ms |
DNS Lookup 13.4 ms
TCP Connect 15.3 ms
TLS Handshake 7.4 ms
Time To First Byte (TTFB) 38.4 ms
Content Download 0.6 ms
Total Response Time 39 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000 |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Meta Description | Start selling what you know, see what sticks, and get paid. Simple and effective. |
| Canonical | https://gumroad.com/about |
| Open Graph Title | Earn your first dollar online with Gumroad |
| Open Graph Description | Start selling what you know, see what sticks, and get paid. Simple and effective. |
| Open Graph Image | https://assets.gumroad.com/images/opengraph_image.png |
Meta Description Start selling what you know, see what sticks, and get paid. Simple and effective. Canonical https://gumroad.com/about Open Graph Title Earn your first dollar online with Gumroad Open Graph Description Start selling what you know, see what sticks, and get paid. Simple and effective. Open Graph Image https://assets.gumroad.com/images/opengraph_image.png Detected Technologies
| Technology | Google Analytics Google Tag Manager Cloudflare Stripe |
Technology Google Analytics Google Tag Manager Cloudflare Stripe
HTTP Headers
| Date
| Thu, 20 Aug 2026 11:50:22 GMT |
| Content-type
| text/html; charset=utf-8 |
| Server
| cloudflare |
| Strict-transport-security
| max-age=31536000 |
| X-revision
| 92e22de5c1d9 |
| X-gr
| PROD |
| Cache-control
| max-age=60, public, stale-while-revalidate=3600, s-maxage=300 |
| Server-timing
| cfEdge;dur=8,cfOrigin;dur=0 |
| X-request-id
| aebb8e20-6413-4a73-8035-05644b7cd9f4 |
| X-runtime
| 0.028907 |
| Vary
| Origin, accept-encoding |
| X-original-headers-class
| Hash |
| X-content-type-options
| nosniff |
| X-xss-protection
| 1; mode=block |
| X-download-options
| noopen |
| X-permitted-cross-domain-policies
| none |
| Content-security-policy
| default-src https: 'self'; child-src * data: blob:; connect-src 'self' blob: www.dropbox.com api.dropboxapi.com s3.amazonaws.com/gumroad s3.amazonaws.com/gumroad/ s3.amazonaws.com/gumroad-public-storage s3.amazonaws.com/gumroad-public-storage/ gumroad-public-storage.s3.amazonaws.com gumroad-public-storage.s3.amazonaws.com/ www.google.com www.gstatic.com *.facebook.com *.facebook.net *.google-analytics.com *.g.doubleclick.net *.googletagmanager.com analytics.google.com *.analytics.google.com analytics.tiktok.com files.gumroad.com/ d1bdh6c3ceakz5.cloudfront.net/ entitlements.jwplayer.com *.braintreegateway.com www.paypalobjects.com *.paypal.com *.braintree-api.com iframe.ly iframely.net help.gumroad.com unpkg.com/@lottiefiles/lottie-player@2.0.12/ gumroad.com wss://cable.gumroad.com assets.gumroad.com; font-src * data: blob:; frame-src * data: blob:; img-src * data: blob:; media-src * data: blob:; object-src * data: blob:; script-src 'self' 'unsafe-eval' ajax.cloudflare.com static.cloudflareinsights.com js.stripe.com api.stripe.com *.braintreegateway.com *.braintree-api.com www.paypalobjects.com *.paypal.com *.google-analytics.com *.googletagmanager.com optimize.google.com www.googleadservices.com www.google.com www.gstatic.com *.facebook.net *.facebook.com www.dropbox.com s.ytimg.com cdn.iframe.ly platform.twitter.com cdn.jwplayer.com *.jwpcdn.com gumroad.us3.list-manage.com analytics.twitter.com analytics.tiktok.com help.gumroad.com unpkg.com/@lottiefiles/lottie-player@2.0.12/ gumroad.com assets.gumroad.com 'nonce-to3lCy5gZleh9Gti0WfT1wXOlXpKN+aQiFJNVU3tLDw=' 'unsafe-inline'; style-src 'self' 'unsafe-inline' s.ytimg.com optimize.google.com fonts.googleapis.com assets.gumroad.com; worker-src * data: blob: |
| Age
| 276 |
| Cf-cache-status
| HIT |
| Link
| ; rel=preload; as=style; crossorigin=anonymous; nopush |
| Content-encoding
| gzip |
| Cf-ray
| a2e12e17eb02d155-CDG |
| Alt-svc
| h3=":443"; ma=86400 |
Meta Tags
| Action-cable-url | wss://cable.gumroad.com/cable |
| Csrf-param | authenticity_token |
| Csrf-token | q5W5C0ctwboD-Ml2lcVHu605VvfCZcu3l-I705LHHH1F2MPMTq64pgFVMYSymWUvWdzrKaFXjttV2V5F99L6IQ |
| Fb:app_id | 149071038533330 |
| Fb:page_id | http://www.facebook.com/gumroad |
| Gr:environment | production |
| Viewport | initial-scale = 1.0, width = device-width |
| Gr:google_analytics:enabled | true |
| Gr:fb_pixel:enabled | true |
| Gr:tiktok_pixel:enabled | true |
| Description | Start selling what you know, see what sticks, and get paid. Simple and effective. |
Date Thu, 20 Aug 2026 11:50:22 GMT
Content-type text/html; charset=utf-8
Server cloudflare
Strict-transport-security max-age=31536000
X-revision 92e22de5c1d9
X-gr PROD
Cache-control max-age=60, public, stale-while-revalidate=3600, s-maxage=300
Server-timing cfEdge;dur=8,cfOrigin;dur=0
X-request-id aebb8e20-6413-4a73-8035-05644b7cd9f4
X-runtime 0.028907
Vary Origin, accept-encoding
X-original-headers-class Hash
X-content-type-options nosniff
X-xss-protection 1; mode=block
X-download-options noopen
X-permitted-cross-domain-policies none
Content-security-policy default-src https: 'self'; child-src * data: blob:; connect-src 'self' blob: www.dropbox.com api.dropboxapi.com s3.amazonaws.com/gumroad s3.amazonaws.com/gumroad/ s3.amazonaws.com/gumroad-public-storage s3.amazonaws.com/gumroad-public-storage/ gumroad-public-storage.s3.amazonaws.com gumroad-public-storage.s3.amazonaws.com/ www.google.com www.gstatic.com *.facebook.com *.facebook.net *.google-analytics.com *.g.doubleclick.net *.googletagmanager.com analytics.google.com *.analytics.google.com analytics.tiktok.com files.gumroad.com/ d1bdh6c3ceakz5.cloudfront.net/ entitlements.jwplayer.com *.braintreegateway.com www.paypalobjects.com *.paypal.com *.braintree-api.com iframe.ly iframely.net help.gumroad.com unpkg.com/@lottiefiles/lottie-player@2.0.12/ gumroad.com wss://cable.gumroad.com assets.gumroad.com; font-src * data: blob:; frame-src * data: blob:; img-src * data: blob:; media-src * data: blob:; object-src * data: blob:; script-src 'self' 'unsafe-eval' ajax.cloudflare.com static.cloudflareinsights.com js.stripe.com api.stripe.com *.braintreegateway.com *.braintree-api.com www.paypalobjects.com *.paypal.com *.google-analytics.com *.googletagmanager.com optimize.google.com www.googleadservices.com www.google.com www.gstatic.com *.facebook.net *.facebook.com www.dropbox.com s.ytimg.com cdn.iframe.ly platform.twitter.com cdn.jwplayer.com *.jwpcdn.com gumroad.us3.list-manage.com analytics.twitter.com analytics.tiktok.com help.gumroad.com unpkg.com/@lottiefiles/lottie-player@2.0.12/ gumroad.com assets.gumroad.com 'nonce-to3lCy5gZleh9Gti0WfT1wXOlXpKN+aQiFJNVU3tLDw=' 'unsafe-inline'; style-src 'self' 'unsafe-inline' s.ytimg.com optimize.google.com fonts.googleapis.com assets.gumroad.com; worker-src * data: blob:
Age 276
Cf-cache-status HIT
Link ; rel=preload; as=style; crossorigin=anonymous; nopush
Content-encoding gzip
Cf-ray a2e12e17eb02d155-CDG
Alt-svc h3=":443"; ma=86400
