Skip to content
https://experian.com

Lighthouse Desktop

· 0 checks — Desktop Lighthouse audit -- Performance, Accessibility, Best Practices, and SEO category breakdown.
SCORE
0
GRADE
FIX
0
REVIEW
0
PASS
0
INFO
0

Detailed Report

Audit breakdown by category with detailed findings.

71

Performance

Insights

Remove large, duplicate JavaScript modules from bundles to reduce unnecessary bytes consumed by network activity.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Polyfills and transforms enable older browsers to use new JavaScript features. However, many aren't necessary for modern browsers. Consider modifying your JavaScript build process to not transpile Baseline features, unless you know you must support older browsers. Learn why most sites can deploy ES6+ code without transpiling

Why this matters

Performance issues directly impact user engagement and conversion rates.

3rd party code can significantly impact load performance. Reduce and defer loading of 3rd party code to prioritize your page's content.

Why this matters

Performance issues directly impact user engagement and conversion rates.

A long cache lifetime can speed up repeat visits to your page. Learn more about caching.

Why this matters

Performance issues directly impact user engagement and conversion rates.

RequestCache TTLTransfer Size
www.experian.com/els-a-Rebele-Macd-What-I-worne-Did-Lampions-I-fe275.0 s241.6 KiB
/signals/config/680167488685105?v=2.9.303&r=stable&domain...1200.0 s118.6 KiB
connect.facebook.net/en_US/fbevents.js1200.0 s96.6 KiB
apps.rokt-api.com/js/v2/us2-1b8024226c8d3a41b455a97ad24399a0/app.js?env=0&2858.0 s58.4 KiB
www.experian.com/static/analytics/at.js1797.0 s51.2 KiB
www.experian.com/static/analytics/analytics-framework.js1797.0 s46.6 KiB
www.redditstatic.com/ads/pixel.js60.0 s19.0 KiB
tms.experian.com/experianus/expcom/Bootstrap.js300.0 s17.1 KiB
pixel.yobi.ai/$web/yopixel.js?t=17768160000000.0 ms16.2 KiB
/signals/config/4432920780360438?v=2.9.303&r=stable&domai...1200.0 s16.0 KiB
js.adsrvr.org/up_loader.3.0.0.js0.0 ms12.3 KiB
tags.srv.stackadapt.com/events.js5.0 s7.7 KiB
s.yimg.com/wi/ytc.js0.0 ms7.1 KiB
widget.trustpilot.com/trustboxes/5419b757fa0340045cd0c938/main.js86400.0 s15.4 KiB
widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js86400.0 s8.1 KiB
www.experian.com/static/analytics/opAppend.js236.0 s2.5 KiB
js.adsrvr.org/universal_pixel.js0.0 ms935 B
/rp.gif?ts=1776807963252&id=t2_1dtpdwsu&event=PageVisit&m...0.0 ms666 B
/config/com/ac9d3a37-7db9-4072-8cb3-5352002424f7.js?v=3.5...0.0 ms474 B
/idsync/ex/receive/check?partner_id=3483&partner_device_i...0.0 ms426 B
/$web/pixel.gif?id=&uid=1-t3szuui2-mo95l38d&ev=pageload&e...0.0 ms418 B
/api/bidder/track/pixel/conversion?cvn=Landing%20Page%20V...0.0 ms311 B
insight.adsrvr.org/track/pxl/?adv=csk2jik&ct=0:zdi1poh&fmt=30.0 ms149 B
/pixel/?ad_log=referer&action=content&pixid=e1c20a12-03ad...0.0 ms131 B
/tr/?id=680167488685105&ev=PageView&dl=https%3A%2F%2Fwww....0.0 ms16 B
/tr/?id=4432920780360438&ev=PageView&dl=https%3A%2F%2Fwww...0.0 ms16 B
/tr/?id=680167488685105&ev=ViewContent&dl=https%3A%2F%2Fw...0.0 ms16 B
/tr/?id=4432920780360438&ev=ViewContent&dl=https%3A%2F%2F...0.0 ms16 B

Your first network request is the most important. Reduce its latency by avoiding redirects, ensuring a fast server response, and enabling text compression.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Optimize LCP by making the LCP image discoverable from the HTML immediately, and avoiding lazy-loading

Why this matters

Performance issues directly impact user engagement and conversion rates.

lhId: page-0-IMG
nodeLabel: Graphic screen with credit score and report.
path: 1,HTML,1,BODY,4,DIV,0,DIV,4,MAIN,0,SECTION,2,DIV,0,DIV,0,DIV,0,DIV,1,DIV,0,DIV,2,IMG
selector: div.row > div.d-none > div.gatsby-image-wrapper > img
snippet: <img sizes="(max-width: 991px) 290px, 350px" data-main-image="" style="object-fit: contain; opacity: 1;" decoding="async" loading="lazy" alt="Graphic screen with credit score and report." src="/static/exp/static/b58da3f56ffab53fa4d938bb01e3c074/daafe/credit-score-and…" srcset="/static/exp/static/b58da3f56ffab53fa4d938bb01e3c074/2dd6d/credit-score-and…">

HTTP/2 and HTTP/3 offer many benefits over HTTP/1.1, such as multiplexing. Learn more about using modern HTTP.

Why this matters

Performance issues directly impact user engagement and conversion rates.

URLProtocol
www.experian.com/http/1.1
www.experian.com/els-a-Rebele-Macd-What-I-worne-Did-Lampions-I-fehttp/1.1
www.experian.com/static/analytics/at.jshttp/1.1
www.experian.com/static/shared/fonts/roboto-400.woff2http/1.1
www.experian.com/static/shared/fonts/roboto-500.woff2http/1.1
www.experian.com/static/shared/fonts/roboto-700.woff2http/1.1
www.experian.com/static/shared/fonts/atlas-icon.woff2?57jj8zhttp/1.1
www.experian.com/static/shared/logos/logo-experian.svghttp/1.1
www.experian.com/static/shared/icons/icon-credit-score.svghttp/1.1
www.experian.com/static/shared/icons/icon-no-ding-bell.svghttp/1.1
www.experian.com/static/shared/icons/icon-piggy-bank.svghttp/1.1
www.experian.com/static/shared/icons/icon-car.svghttp/1.1
www.experian.com/static/shared/icons/icon-experian-smart-money.svghttp/1.1
www.experian.com/static/analytics/opAppend.jshttp/1.1
www.experian.com/static/analytics/analytics-framework.jshttp/1.1
www.experian.com/static/exp/webpack-runtime-0cd3f78bd16c1f011187.jshttp/1.1
www.experian.com/static/exp/framework-73658c754fb72bc0a50b.jshttp/1.1
www.experian.com/static/exp/app-68dd2b7a50ee6f5c40f4.jshttp/1.1
/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e...http/1.1
www.experian.com/static/exp/page-data/app-data.jsonhttp/1.1
www.experian.com/static/exp/page-data/index/page-data.jsonhttp/1.1
www.experian.com/_Incapsula_Resource?SWKMTFSR=1&e=0.6056572639101764http/1.1
/static/exp/static/b58da3f56ffab53fa4d938bb01e3c074/daafe...http/1.1
/static/exp/static/6ed2c735ab46ab39d6b9e96676621ce2/99166...http/1.1
/static/exp/static/2c7358d4b0cd8d830fb3135233ecbea4/d2e78...http/1.1
www.experian.com/favicon.icohttp/1.1
www.experian.com/static/exp/commons-6aa8e0e9c3ce93eb43e3.jshttp/1.1
/static/exp/842b7fc64f513b24dfadd9e3ddef79435fc06b93-db39...http/1.1
/static/exp/89229c4a42ffc5de5168ba3c7ce5076cb2034b77-26a6...http/1.1
/static/exp/6719fb1fc6169686964b1a230a7f9a78473edbf2-2ed6...http/1.1
/static/exp/0dc5c87050b6ebe2c7412a7a15b8979126bb4dad-c767...http/1.1
/static/exp/component---src-pages-index-tsx-32d1e14bb8b6b...http/1.1
www.experian.com/static/exp/5676-5a10de083b970a3793f5.jshttp/1.1
www.experian.com/static/exp/recorder-28ae990cb75146cc9e3f.jshttp/1.1
/static/shared/patterns/pattern-squircles-background-prim...http/1.1
/els-a-Rebele-Macd-What-I-worne-Did-Lampions-I-fe?d=www.e...http/1.1

Avoid chaining critical requests by reducing the length of chains, reducing the download size of resources, or deferring the download of unnecessary resources to improve page load.

Why this matters

Performance issues directly impact user engagement and conversion rates.

description: [preconnect](https://developer.chrome.com/docs/lighthouse/performance/uses-rel-preconnect/) hints help the browser establish a connection earlier in the page load, saving time when the first request for that origin is made. The following are the origins that the page preconnected to.
title: Preconnected origins
value: no origins were preconnected
description: Add [preconnect](https://developer.chrome.com/docs/lighthouse/performance/uses-rel-preconnect/) hints to your most important origins, but try to use no more than 4.
title: Preconnect candidates

Reducing the download time of images can improve the perceived load time of the page and LCP. Learn more about optimizing image size

Why this matters

Performance issues directly impact user engagement and conversion rates.

URLResource SizeEst Savings
Graphic Sam Richardson sitting with phone. div.row > div.col-sm-4 > div.gatsby-image-wrapper > img
/static/exp/static/2c7358d4b0cd8d830fb3135233ecbea4/d2e78...132.6 KiB72.7 KiB

These insights are also available in the Chrome DevTools Performance Panel - record a trace to view more detailed information.

Redirects introduce additional delays before the page can be loaded. Learn how to avoid page redirects.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Estimated savings: 527 ms
URLTime Spent
experian.com/527 ms
www.experian.com/0.0 ms

Time to Interactive is the amount of time it takes for the page to become fully interactive. Learn more about the Time to Interactive metric.

Why this matters

Performance issues directly impact user engagement and conversion rates.

TTI

The maximum potential First Input Delay that your users could experience is the duration of the longest task. Learn more about the Maximum Potential First Input Delay metric.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Diagnostics

Consider reducing the time spent parsing, compiling, and executing JS. You may find delivering smaller JS payloads helps with this. Learn how to reduce Javascript execution time.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Consider reducing the time spent parsing, compiling and executing JS. You may find delivering smaller JS payloads helps with this. Learn how to minimize main-thread work

Why this matters

Performance issues directly impact user engagement and conversion rates.

CategoryTime Spent
Script Evaluation1.8 s
Other440 ms
Script Parsing & Compilation173 ms
Rendering47 ms
Garbage Collection46 ms
Parse HTML & CSS33 ms
Style & Layout33 ms

Minifying JavaScript files can reduce payload sizes and script parse time. Learn how to minify JavaScript.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Estimated savings: 0.0 ms 5.4 KiB
URLTransfer SizeEst Savings
pixel.yobi.ai/$web/yopixel.js?t=177681600000015.8 KiB5.4 KiB

Reduce unused rules from stylesheets and defer CSS not used for above-the-fold content to decrease bytes consumed by network activity. Learn how to reduce unused CSS.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Estimated savings: 0.0 ms 21.7 KiB

More information about the performance of your application. These numbers don't directly affect the Performance score.

●Layout shift culprits
●Optimize DOM size
●Font display
●Forced reflow
●LCP breakdown
●Render blocking requests
●Optimize viewport for mobile
●Minify CSS
●Avoids enormous network payloads Total size was 2,450 KiB
●User Timing marks and measures 22 user timings
●Avoid long main-thread tasks 11 long tasks found
●Image elements have explicit `width` and `height`
●Page didn't prevent back/forward cache restoration
●Network Requests
●Network Round Trip Times 120 ms
●Server Backend Latencies 600 ms
●Tasks
●Diagnostics
●Metrics
●Screenshot Thumbnails
●Final Screenshot
●Script Treemap Data
●Resources Summary
●Initial server response time was short Root document took 520 ms
○INP breakdown
○Avoid non-composited animations
○Avoid large layout shifts
100

Accessibility

These checks highlight opportunities to improve the accessibility of your web app. Automatic detection can only detect a subset of issues and does not guarantee the accessibility of your web app, so manual testing is also encouraged.

○Interactive controls are keyboard focusable
○Interactive elements indicate their purpose and state
○The page has a logical tab order
○Visual order on the page follows DOM order
○User focus is not accidentally trapped in a region
○The user's focus is directed to new content added to the page
○HTML5 landmark elements are used to improve navigation
○Offscreen content is hidden from assistive technology
○Custom controls have associated labels
○Custom controls have ARIA roles
●`[aria-*]` attributes match their roles
●`[aria-hidden="true"]` is not present on the document `<body>`
●`[role]`s have all required `[aria-*]` attributes
●Elements with an ARIA `[role]` that require children to contain a specific `[role]` have all required children.
●`[role]`s are contained by their required parent element
●`[role]` values are valid
●`[aria-*]` attributes have valid values
●`[aria-*]` attributes are valid and not misspelled
●Buttons have an accessible name
●Image elements have `[alt]` attributes
●`[user-scalable="no"]` is not used in the `<meta name="viewport">` element and the `[maximum-scale]` attribute is not less than 5.
●ARIA attributes are used as specified for the element's role
●`[aria-hidden="true"]` elements do not contain focusable descendents
●Elements use only permitted ARIA attributes
●Background and foreground colors have a sufficient contrast ratio
●Document has a `<title>` element
●`<frame>` or `<iframe>` elements have a title
●`<html>` element has a `[lang]` attribute
●`<html>` element has a valid value for its `[lang]` attribute
●Links are distinguishable without relying on color.
●Links have a discernible name
●Lists contain only `<li>` elements and script supporting elements (`<script>` and `<template>`).
●List items (`<li>`) are contained within `<ul>`, `<ol>` or `<menu>` parent elements
●No element has a `[tabindex]` value greater than 0
●Touch targets have sufficient size and spacing.
●Heading elements appear in a sequentially-descending order
●Skip links are focusable.
●Document has a main landmark.
●Deprecated ARIA roles were not used
●Elements with visible text labels have matching accessible names.
○`[accesskey]` values are unique
○`button`, `link`, and `menuitem` elements have accessible names
○Elements with `role="dialog"` or `role="alertdialog"` have accessible names.
○ARIA input fields have accessible names
○ARIA `meter` elements have accessible names
○ARIA `progressbar` elements have accessible names
○Elements with the `role=text` attribute do not have focusable descendents.
○ARIA toggle fields have accessible names
○ARIA `tooltip` elements have accessible names
○ARIA `treeitem` elements have accessible names
○The page contains a heading, skip link, or landmark region
○`<dl>`'s contain only properly-ordered `<dt>` and `<dd>` groups, `<script>`, `<template>` or `<div>` elements.
○Definition list items are wrapped in `<dl>` elements
○ARIA IDs are unique
○No form fields have multiple labels
○`<html>` element has an `[xml:lang]` attribute with the same base language as the `[lang]` attribute.
○Input buttons have discernible text.
○`<input type="image">` elements have `[alt]` text
○Form elements have associated labels
○The document does not use `<meta http-equiv="refresh">`
○`<object>` elements have alternate text
○Select elements have associated label elements.
○Cells in a `<table>` element that use the `[headers]` attribute refer to table cells within the same table.
○`<th>` elements and elements with `[role="columnheader"/"rowheader"]` have data cells they describe.
○`[lang]` attributes have a valid value
○`<video>` elements contain a `<track>` element with `[kind="captions"]`
○Tables have different content in the summary attribute and `<caption>`.
○All heading elements contain content.
○Uses ARIA roles only on compatible elements
○Image elements do not have `[alt]` attributes that are redundant text.
○Identical links have the same purpose.
○Tables use `<caption>` instead of cells with the `[colspan]` attribute to indicate a caption.
○`<td>` elements in a large `<table>` have one or more table headers.
73

Best Practices

General

Deprecated APIs will eventually be removed from the browser. Learn more about deprecated APIs.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Deprecation / WarningSource
AttributionReporting

Errors logged to the console indicate unresolved problems. They can come from network request failures and other browser concerns. Learn more about this errors in console diagnostic audit

Why this matters

Performance issues directly impact user engagement and conversion rates.

SourceDescription
Access to XMLHttpRequest at 'https://usa.experian.com/api/clickstream/sessionStart' from origin 'https://www.experian.com' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
Access to XMLHttpRequest at 'https://usa.experian.com/api/clickstream/sessionStart' from origin 'https://www.experian.com' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
Access to XMLHttpRequest at 'https://usa.experian.com/api/clickstream/sessionStart' from origin 'https://www.experian.com' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
Access to XMLHttpRequest at 'https://usa.experian.com/api/clickstream/uilog' from origin 'https://www.experian.com' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
Connecting to 'https://bded8a3c6ae-1-1053047382554.us-central1.run.app/events?cee=no' violates the following Content Security Policy directive: "default-src 'self' *.brightcove.com *.browser-intake-datadoghq.com *.coveo.com *.conversionsapigateway.com *.criteo.com *.criteo.net *.demdex.net *.doubleclick.net *.eloqua.com *.ensighten.com *.experian.com *.experiancs.com *.experiandirect.com *.eppo.cloud *.freecreditreport.com *.googleapis.com *.googlesyndication.com *.gstatic.com *.teads.tv *.pinterest.com *.hotjar.com *.iesnare.com *.infogram.com *.liadm.com *.linkedin.com *.optmster.com *.optmstr.com *.optnmnstr.co *.optnmnstr.com *.optnmstr.com *.powerreviews.com *.reddit.com *.soundcloud.com *.tableau.com *.twitter.com *.twonil.com *.vimeo.com *.yahooapis.com *.youtube.com *.hubapi.com *.hubspot.com *.tt.omtrdc.net *.yobi.ai adobetag.com analytics-ipv6.tiktokw.us api-js.mixpanel.com api.company-target.com api.experianmarketingservices.com api.instagram.com api.jublo.net api.measureone.com api.omniture.com app.optinmonster.com apps.rokt.com assets.adobedtm.com bat.bing.com businesscreditfacts.com cdn.appdynamics.com cdn.lr-ingest.com cdn.syndication.twimg.com cdn.taboola.com cdnjs.cloudflare.com code.highcharts.com connect.facebook.net contractorcheck.com cds.taboola.com d.net.google.com d.turn.com dev.visualwebsiteoptimizer.com embed.pscp.tv experianservicescorp.122.2o7.net fbcdn.net forms.hubspot.com freecreditscore.com graph.facebook.com googleapis.com hooks.slack.com ik.imagekit.io img.en25.com info.inbound-bis.com itunes.apple.com js.bizographics.com js.hs-analytics.net js.hs-scripts.com js.hscollectedforms.net jsonip.com js.usemessages.com libraweb.tiktokw.us loadm.exelator.com m.addthis.com m.addthisedge.com maps.google.com maxcdn.bootstrapcdn.com mediaplayer.yahoo.com moodysanalytics.com mpc2-prod-21-is5qnl632q-uc.a.run.app optinmonster.com pixel.tapad.com play.google.com players.brightcove.net plus.google.com pt.ispot.tv pips.taboola.com rtd-tm.everesttech.net s.amazon-adsystem.com s.yimg.com s.ytimg.com s7.addthis.com scontent.cdninstagram.com scontent.xx.fbcdn.net scripts.demandbase.com secure.adnxs.com secure.leadback.advertising.com securetracking.adsprotection.com *.xg4ken.com smartbusinessreports.com https://sc-static.net *.snapchat.com snap.licdn.com sp.analytics.yahoo.com ssl.google-analytics.com static.ads-twitter.com sync.tidaltv.com trc-events.taboola.com tag.demandbase.com tagmanager.google.com trc.taboola.com twemoji.maxcdn.com video.xx.fbcdn.net vjs.zencdn.net widget.surveymonkey.com widgets.outbrain.com https://*.brightfunnel.com http://*.hotjar.com https://*.hotjar.com https://*.hsadspixel.net https://*.jsdelivr.net https://*.mstrlytcs.com https://a.optmnstr.com https://api.optmnstr.com https://autocomplete.demandbase.com http://autocomplete.demandbase.com https://cdn.allitrk.com https://apps.rokt-api.com https://www.redditstatic.com https://collector.allitrk.com ws://*.hotjar.com wss://*.hotjar.com *.edq.com www.facebook.com www.google-analytics.com www.google.com http://www.google.com www.googleadservices.com www.googletagmanager.com www.slideshare.net www.youtube.com globalsiteanalytics.com *.mczbf.com *.sjwoe.com analytics.tiktok.com cdn.pdst.fm *.trustpilot.com trkn.us us-central1-adaptive-growth.cloudfunctions.net sink.pdst.fm *.qualtrics.com analytics.google.com *.nextdoor.com *.google.com *.yoast.com yoast.com *.datadoghq-browser-agent.com *.datadoghq.com *.yieldmo.com pix.pub *.biocatch.com *.we-stats.com activitymap.adobe.com *.branch.io app.link *.app.link s.pinimg.com unpkg.com *.inmobicdn.net analytics-sm.com browser-intake-datadoghq.com google.com tags.srv.stackadapt.com nextinsure.com *.nextinsure.com *.save.auto *.supermoney.com *.ownup.com pixels.spotify.com js.adsrvr.org match.adsrvr.org sync.adsrvr.org insight.adsrvr.org pixel.adsrvr.org servedby.thedmp.com global.prod.uidapi.com prod.euid.eu *.money.com 'unsafe-inline' 'unsafe-eval' blob:". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback. The action has been blocked.
Connecting to 'https://bded8a3c6ae-1-1053047382554.us-central1.run.app/events?cee=no' violates the following Content Security Policy directive: "default-src 'self' *.brightcove.com *.browser-intake-datadoghq.com *.coveo.com *.conversionsapigateway.com *.criteo.com *.criteo.net *.demdex.net *.doubleclick.net *.eloqua.com *.ensighten.com *.experian.com *.experiancs.com *.experiandirect.com *.eppo.cloud *.freecreditreport.com *.googleapis.com *.googlesyndication.com *.gstatic.com *.teads.tv *.pinterest.com *.hotjar.com *.iesnare.com *.infogram.com *.liadm.com *.linkedin.com *.optmster.com *.optmstr.com *.optnmnstr.co *.optnmnstr.com *.optnmstr.com *.powerreviews.com *.reddit.com *.soundcloud.com *.tableau.com *.twitter.com *.twonil.com *.vimeo.com *.yahooapis.com *.youtube.com *.hubapi.com *.hubspot.com *.tt.omtrdc.net *.yobi.ai adobetag.com analytics-ipv6.tiktokw.us api-js.mixpanel.com api.company-target.com api.experianmarketingservices.com api.instagram.com api.jublo.net api.measureone.com api.omniture.com app.optinmonster.com apps.rokt.com assets.adobedtm.com bat.bing.com businesscreditfacts.com cdn.appdynamics.com cdn.lr-ingest.com cdn.syndication.twimg.com cdn.taboola.com cdnjs.cloudflare.com code.highcharts.com connect.facebook.net contractorcheck.com cds.taboola.com d.net.google.com d.turn.com dev.visualwebsiteoptimizer.com embed.pscp.tv experianservicescorp.122.2o7.net fbcdn.net forms.hubspot.com freecreditscore.com graph.facebook.com googleapis.com hooks.slack.com ik.imagekit.io img.en25.com info.inbound-bis.com itunes.apple.com js.bizographics.com js.hs-analytics.net js.hs-scripts.com js.hscollectedforms.net jsonip.com js.usemessages.com libraweb.tiktokw.us loadm.exelator.com m.addthis.com m.addthisedge.com maps.google.com maxcdn.bootstrapcdn.com mediaplayer.yahoo.com moodysanalytics.com mpc2-prod-21-is5qnl632q-uc.a.run.app optinmonster.com pixel.tapad.com play.google.com players.brightcove.net plus.google.com pt.ispot.tv pips.taboola.com rtd-tm.everesttech.net s.amazon-adsystem.com s.yimg.com s.ytimg.com s7.addthis.com scontent.cdninstagram.com scontent.xx.fbcdn.net scripts.demandbase.com secure.adnxs.com secure.leadback.advertising.com securetracking.adsprotection.com *.xg4ken.com smartbusinessreports.com https://sc-static.net *.snapchat.com snap.licdn.com sp.analytics.yahoo.com ssl.google-analytics.com static.ads-twitter.com sync.tidaltv.com trc-events.taboola.com tag.demandbase.com tagmanager.google.com trc.taboola.com twemoji.maxcdn.com video.xx.fbcdn.net vjs.zencdn.net widget.surveymonkey.com widgets.outbrain.com https://*.brightfunnel.com http://*.hotjar.com https://*.hotjar.com https://*.hsadspixel.net https://*.jsdelivr.net https://*.mstrlytcs.com https://a.optmnstr.com https://api.optmnstr.com https://autocomplete.demandbase.com http://autocomplete.demandbase.com https://cdn.allitrk.com https://apps.rokt-api.com https://www.redditstatic.com https://collector.allitrk.com ws://*.hotjar.com wss://*.hotjar.com *.edq.com www.facebook.com www.google-analytics.com www.google.com http://www.google.com www.googleadservices.com www.googletagmanager.com www.slideshare.net www.youtube.com globalsiteanalytics.com *.mczbf.com *.sjwoe.com analytics.tiktok.com cdn.pdst.fm *.trustpilot.com trkn.us us-central1-adaptive-growth.cloudfunctions.net sink.pdst.fm *.qualtrics.com analytics.google.com *.nextdoor.com *.google.com *.yoast.com yoast.com *.datadoghq-browser-agent.com *.datadoghq.com *.yieldmo.com pix.pub *.biocatch.com *.we-stats.com activitymap.adobe.com *.branch.io app.link *.app.link s.pinimg.com unpkg.com *.inmobicdn.net analytics-sm.com browser-intake-datadoghq.com google.com tags.srv.stackadapt.com nextinsure.com *.nextinsure.com *.save.auto *.supermoney.com *.ownup.com pixels.spotify.com js.adsrvr.org match.adsrvr.org sync.adsrvr.org insight.adsrvr.org pixel.adsrvr.org servedby.thedmp.com global.prod.uidapi.com prod.euid.eu *.money.com 'unsafe-inline' 'unsafe-eval' blob:". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback. The action has been blocked.
Connecting to 'https://ov-1d104299d2a447049cdc73700c9309f7.ecs.us-west-2.on.aws/events?cee=no' violates the following Content Security Policy directive: "default-src 'self' *.brightcove.com *.browser-intake-datadoghq.com *.coveo.com *.conversionsapigateway.com *.criteo.com *.criteo.net *.demdex.net *.doubleclick.net *.eloqua.com *.ensighten.com *.experian.com *.experiancs.com *.experiandirect.com *.eppo.cloud *.freecreditreport.com *.googleapis.com *.googlesyndication.com *.gstatic.com *.teads.tv *.pinterest.com *.hotjar.com *.iesnare.com *.infogram.com *.liadm.com *.linkedin.com *.optmster.com *.optmstr.com *.optnmnstr.co *.optnmnstr.com *.optnmstr.com *.powerreviews.com *.reddit.com *.soundcloud.com *.tableau.com *.twitter.com *.twonil.com *.vimeo.com *.yahooapis.com *.youtube.com *.hubapi.com *.hubspot.com *.tt.omtrdc.net *.yobi.ai adobetag.com analytics-ipv6.tiktokw.us api-js.mixpanel.com api.company-target.com api.experianmarketingservices.com api.instagram.com api.jublo.net api.measureone.com api.omniture.com app.optinmonster.com apps.rokt.com assets.adobedtm.com bat.bing.com businesscreditfacts.com cdn.appdynamics.com cdn.lr-ingest.com cdn.syndication.twimg.com cdn.taboola.com cdnjs.cloudflare.com code.highcharts.com connect.facebook.net contractorcheck.com cds.taboola.com d.net.google.com d.turn.com dev.visualwebsiteoptimizer.com embed.pscp.tv experianservicescorp.122.2o7.net fbcdn.net forms.hubspot.com freecreditscore.com graph.facebook.com googleapis.com hooks.slack.com ik.imagekit.io img.en25.com info.inbound-bis.com itunes.apple.com js.bizographics.com js.hs-analytics.net js.hs-scripts.com js.hscollectedforms.net jsonip.com js.usemessages.com libraweb.tiktokw.us loadm.exelator.com m.addthis.com m.addthisedge.com maps.google.com maxcdn.bootstrapcdn.com mediaplayer.yahoo.com moodysanalytics.com mpc2-prod-21-is5qnl632q-uc.a.run.app optinmonster.com pixel.tapad.com play.google.com players.brightcove.net plus.google.com pt.ispot.tv pips.taboola.com rtd-tm.everesttech.net s.amazon-adsystem.com s.yimg.com s.ytimg.com s7.addthis.com scontent.cdninstagram.com scontent.xx.fbcdn.net scripts.demandbase.com secure.adnxs.com secure.leadback.advertising.com securetracking.adsprotection.com *.xg4ken.com smartbusinessreports.com https://sc-static.net *.snapchat.com snap.licdn.com sp.analytics.yahoo.com ssl.google-analytics.com static.ads-twitter.com sync.tidaltv.com trc-events.taboola.com tag.demandbase.com tagmanager.google.com trc.taboola.com twemoji.maxcdn.com video.xx.fbcdn.net vjs.zencdn.net widget.surveymonkey.com widgets.outbrain.com https://*.brightfunnel.com http://*.hotjar.com https://*.hotjar.com https://*.hsadspixel.net https://*.jsdelivr.net https://*.mstrlytcs.com https://a.optmnstr.com https://api.optmnstr.com https://autocomplete.demandbase.com http://autocomplete.demandbase.com https://cdn.allitrk.com https://apps.rokt-api.com https://www.redditstatic.com https://collector.allitrk.com ws://*.hotjar.com wss://*.hotjar.com *.edq.com www.facebook.com www.google-analytics.com www.google.com http://www.google.com www.googleadservices.com www.googletagmanager.com www.slideshare.net www.youtube.com globalsiteanalytics.com *.mczbf.com *.sjwoe.com analytics.tiktok.com cdn.pdst.fm *.trustpilot.com trkn.us us-central1-adaptive-growth.cloudfunctions.net sink.pdst.fm *.qualtrics.com analytics.google.com *.nextdoor.com *.google.com *.yoast.com yoast.com *.datadoghq-browser-agent.com *.datadoghq.com *.yieldmo.com pix.pub *.biocatch.com *.we-stats.com activitymap.adobe.com *.branch.io app.link *.app.link s.pinimg.com unpkg.com *.inmobicdn.net analytics-sm.com browser-intake-datadoghq.com google.com tags.srv.stackadapt.com nextinsure.com *.nextinsure.com *.save.auto *.supermoney.com *.ownup.com pixels.spotify.com js.adsrvr.org match.adsrvr.org sync.adsrvr.org insight.adsrvr.org pixel.adsrvr.org servedby.thedmp.com global.prod.uidapi.com prod.euid.eu *.money.com 'unsafe-inline' 'unsafe-eval' blob:". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback. The action has been blocked.
Connecting to 'https://ov-1d104299d2a447049cdc73700c9309f7.ecs.us-west-2.on.aws/events?cee=no' violates the following Content Security Policy directive: "default-src 'self' *.brightcove.com *.browser-intake-datadoghq.com *.coveo.com *.conversionsapigateway.com *.criteo.com *.criteo.net *.demdex.net *.doubleclick.net *.eloqua.com *.ensighten.com *.experian.com *.experiancs.com *.experiandirect.com *.eppo.cloud *.freecreditreport.com *.googleapis.com *.googlesyndication.com *.gstatic.com *.teads.tv *.pinterest.com *.hotjar.com *.iesnare.com *.infogram.com *.liadm.com *.linkedin.com *.optmster.com *.optmstr.com *.optnmnstr.co *.optnmnstr.com *.optnmstr.com *.powerreviews.com *.reddit.com *.soundcloud.com *.tableau.com *.twitter.com *.twonil.com *.vimeo.com *.yahooapis.com *.youtube.com *.hubapi.com *.hubspot.com *.tt.omtrdc.net *.yobi.ai adobetag.com analytics-ipv6.tiktokw.us api-js.mixpanel.com api.company-target.com api.experianmarketingservices.com api.instagram.com api.jublo.net api.measureone.com api.omniture.com app.optinmonster.com apps.rokt.com assets.adobedtm.com bat.bing.com businesscreditfacts.com cdn.appdynamics.com cdn.lr-ingest.com cdn.syndication.twimg.com cdn.taboola.com cdnjs.cloudflare.com code.highcharts.com connect.facebook.net contractorcheck.com cds.taboola.com d.net.google.com d.turn.com dev.visualwebsiteoptimizer.com embed.pscp.tv experianservicescorp.122.2o7.net fbcdn.net forms.hubspot.com freecreditscore.com graph.facebook.com googleapis.com hooks.slack.com ik.imagekit.io img.en25.com info.inbound-bis.com itunes.apple.com js.bizographics.com js.hs-analytics.net js.hs-scripts.com js.hscollectedforms.net jsonip.com js.usemessages.com libraweb.tiktokw.us loadm.exelator.com m.addthis.com m.addthisedge.com maps.google.com maxcdn.bootstrapcdn.com mediaplayer.yahoo.com moodysanalytics.com mpc2-prod-21-is5qnl632q-uc.a.run.app optinmonster.com pixel.tapad.com play.google.com players.brightcove.net plus.google.com pt.ispot.tv pips.taboola.com rtd-tm.everesttech.net s.amazon-adsystem.com s.yimg.com s.ytimg.com s7.addthis.com scontent.cdninstagram.com scontent.xx.fbcdn.net scripts.demandbase.com secure.adnxs.com secure.leadback.advertising.com securetracking.adsprotection.com *.xg4ken.com smartbusinessreports.com https://sc-static.net *.snapchat.com snap.licdn.com sp.analytics.yahoo.com ssl.google-analytics.com static.ads-twitter.com sync.tidaltv.com trc-events.taboola.com tag.demandbase.com tagmanager.google.com trc.taboola.com twemoji.maxcdn.com video.xx.fbcdn.net vjs.zencdn.net widget.surveymonkey.com widgets.outbrain.com https://*.brightfunnel.com http://*.hotjar.com https://*.hotjar.com https://*.hsadspixel.net https://*.jsdelivr.net https://*.mstrlytcs.com https://a.optmnstr.com https://api.optmnstr.com https://autocomplete.demandbase.com http://autocomplete.demandbase.com https://cdn.allitrk.com https://apps.rokt-api.com https://www.redditstatic.com https://collector.allitrk.com ws://*.hotjar.com wss://*.hotjar.com *.edq.com www.facebook.com www.google-analytics.com www.google.com http://www.google.com www.googleadservices.com www.googletagmanager.com www.slideshare.net www.youtube.com globalsiteanalytics.com *.mczbf.com *.sjwoe.com analytics.tiktok.com cdn.pdst.fm *.trustpilot.com trkn.us us-central1-adaptive-growth.cloudfunctions.net sink.pdst.fm *.qualtrics.com analytics.google.com *.nextdoor.com *.google.com *.yoast.com yoast.com *.datadoghq-browser-agent.com *.datadoghq.com *.yieldmo.com pix.pub *.biocatch.com *.we-stats.com activitymap.adobe.com *.branch.io app.link *.app.link s.pinimg.com unpkg.com *.inmobicdn.net analytics-sm.com browser-intake-datadoghq.com google.com tags.srv.stackadapt.com nextinsure.com *.nextinsure.com *.save.auto *.supermoney.com *.ownup.com pixels.spotify.com js.adsrvr.org match.adsrvr.org sync.adsrvr.org insight.adsrvr.org pixel.adsrvr.org servedby.thedmp.com global.prod.uidapi.com prod.euid.eu *.money.com 'unsafe-inline' 'unsafe-eval' blob:". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback. The action has been blocked.
Connecting to 'https://www.google.es/pagead/1p-conversion/880420905/?random=912379073&cv=11&fst=1776807963327&bg=ffffff&guid=ON&async=1&en=Experian.com%20Landing%20Page%20Visit&gtm=45be64h1v9200388294za200zd9200388294xec&gcd=13l3l3l2l1l1&dma_cps=a&dma=1&tag_exp=0~115938465~115938469~117266400~117884344&u_w=800&u_h=600&url=https%3A%2F%2Fwww.experian.com%2F&rcb=17&label=jSEeCJ31o8sBEKnQ6KMD&capi=1&gtm_ee=1&frm=0&tiba=Experian%3A%20Credit%20Report%2C%20FICO%C2%AE%20Score%20%26%20Financial%20Tools&hn=www.googleadservices.com...daMsSmMP2H-CJ34EFzjd2yVqH-ok6xKiK3P-EfucnLV7kdJf5O36c9I&random=3961301587&ipr=y&pscrd=IhMIzYj1u_X_kwMVvGAdCR2ShTivMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhlodHRwczovL3d3dy5leHBlcmlhbi5jb20vQlZDaEFJOE1DY3p3WVFvT2U1N092Vm5yb2VFaXdBdHR2bjBacmxlNDdldF94cnRGNTVpMFJoZnh0dUxfYWJrQzdRS3puTlpzaEhaaUdLMUYyX3NDU3lid3oMCAliCAgAEAAYACAA' violates the following Content Security Policy directive: "default-src 'self' *.brightcove.com *.browser-intake-datadoghq.com *.coveo.com *.conversionsapigateway.com *.criteo.com *.criteo.net *.demdex.net *.doubleclick.net *.eloqua.com *.ensighten.com *.experian.com *.experiancs.com *.experiandirect.com *.eppo.cloud *.freecreditreport.com *.googleapis.com *.googlesyndication.com *.gstatic.com *.teads.tv *.pinterest.com *.hotjar.com *.iesnare.com *.infogram.com *.liadm.com *.linkedin.com *.optmster.com *.optmstr.com *.optnmnstr.co *.optnmnstr.com *.optnmstr.com *.powerreviews.com *.reddit.com *.soundcloud.com *.tableau.com *.twitter.com *.twonil.com *.vimeo.com *.yahooapis.com *.youtube.com *.hubapi.com *.hubspot.com *.tt.omtrdc.net *.yobi.ai adobetag.com analytics-ipv6.tiktokw.us api-js.mixpanel.com api.company-target.com api.experianmarketingservices.com api.instagram.com api.jublo.net api.measureone.com api.omniture.com app.optinmonster.com apps.rokt.com assets.adobedtm.com bat.bing.com businesscreditfacts.com cdn.appdynamics.com cdn.lr-ingest.com cdn.syndication.twimg.com cdn.taboola.com cdnjs.cloudflare.com code.highcharts.com connect.facebook.net contractorcheck.com cds.taboola.com d.net.google.com d.turn.com dev.visualwebsiteoptimizer.com embed.pscp.tv experianservicescorp.122.2o7.net fbcdn.net forms.hubspot.com freecreditscore.com graph.facebook.com googleapis.com hooks.slack.com ik.imagekit.io img.en25.com info.inbound-bis.com itunes.apple.com js.bizographics.com js.hs-analytics.net js.hs-scripts.com js.hscollectedforms.net jsonip.com js.usemessages.com libraweb.tiktokw.us loadm.exelator.com m.addthis.com m.addthisedge.com maps.google.com maxcdn.bootstrapcdn.com mediaplayer.yahoo.com moodysanalytics.com mpc2-prod-21-is5qnl632q-uc.a.run.app optinmonster.com pixel.tapad.com play.google.com players.brightcove.net plus.google.com pt.ispot.tv pips.taboola.com rtd-tm.everesttech.net s.amazon-adsystem.com s.yimg.com s.ytimg.com s7.addthis.com scontent.cdninstagram.com scontent.xx.fbcdn.net scripts.demandbase.com secure.adnxs.com secure.leadback.advertising.com securetracking.adsprotection.com *.xg4ken.com smartbusinessreports.com https://sc-static.net *.snapchat.com snap.licdn.com sp.analytics.yahoo.com ssl.google-analytics.com static.ads-twitter.com sync.tidaltv.com trc-events.taboola.com tag.demandbase.com tagmanager.google.com trc.taboola.com twemoji.maxcdn.com video.xx.fbcdn.net vjs.zencdn.net widget.surveymonkey.com widgets.outbrain.com https://*.brightfunnel.com http://*.hotjar.com https://*.hotjar.com https://*.hsadspixel.net https://*.jsdelivr.net https://*.mstrlytcs.com https://a.optmnstr.com https://api.optmnstr.com https://autocomplete.demandbase.com http://autocomplete.demandbase.com https://cdn.allitrk.com https://apps.rokt-api.com https://www.redditstatic.com https://collector.allitrk.com ws://*.hotjar.com wss://*.hotjar.com *.edq.com www.facebook.com www.google-analytics.com www.google.com http://www.google.com www.googleadservices.com www.googletagmanager.com www.slideshare.net www.youtube.com globalsiteanalytics.com *.mczbf.com *.sjwoe.com analytics.tiktok.com cdn.pdst.fm *.trustpilot.com trkn.us us-central1-adaptive-growth.cloudfunctions.net sink.pdst.fm *.qualtrics.com analytics.google.com *.nextdoor.com *.google.com *.yoast.com yoast.com *.datadoghq-browser-agent.com *.datadoghq.com *.yieldmo.com pix.pub *.biocatch.com *.we-stats.com activitymap.adobe.com *.branch.io app.link *.app.link s.pinimg.com unpkg.com *.inmobicdn.net analytics-sm.com browser-intake-datadoghq.com google.com tags.srv.stackadapt.com nextinsure.com *.nextinsure.com *.save.auto *.supermoney.com *.ownup.com pixels.spotify.com js.adsrvr.org match.adsrvr.org sync.adsrvr.org insight.adsrvr.org pixel.adsrvr.org servedby.thedmp.com global.prod.uidapi.com prod.euid.eu *.money.com 'unsafe-inline' 'unsafe-eval' blob:". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback. The action has been blocked.
Connecting to 'https://www.google.es/pagead/1p-conversion/880420905/?random=912379073&cv=11&fst=1776807963327&bg=ffffff&guid=ON&async=1&en=Experian.com%20Landing%20Page%20Visit&gtm=45be64h1v9200388294za200zd9200388294xec&gcd=13l3l3l2l1l1&dma_cps=a&dma=1&tag_exp=0~115938465~115938469~117266400~117884344&u_w=800&u_h=600&url=https%3A%2F%2Fwww.experian.com%2F&rcb=17&label=jSEeCJ31o8sBEKnQ6KMD&capi=1&gtm_ee=1&frm=0&tiba=Experian%3A%20Credit%20Report%2C%20FICO%C2%AE%20Score%20%26%20Financial%20Tools&hn=www.googleadservices.com...EiwA-P8T6ay3zZZLKuBlr4EDLTZkrMmFJ4EANtCXV8olzwf49aNYk175QgjelBoCqKs&gcp=3&ipr=y&pscrd=IhMIzYj1u_X_kwMVvGAdCR2ShTivMgwIA2IICAAQABgAIAAyDAgEYggIABAAGAAgADIMCAdiCAgAEAAYACAAMgwICGIICAAQABgAIAAyDAgJYggIABAAGAAgADIMCApiCAgAEAAYACAAMgwIAmIICAAQABgAIAAyDAgLYggIABAAGAAgADIMCBViCAgAEAAYACAAMgwIH2IICAAQABgAIAAyDAgTYggIABAAGAAgADIMCBJiCAgAEAAYACAAOhlodHRwczovL3d3dy5leHBlcmlhbi5jb20vQlZDaEFJOE1DY3p3WVFvT2U1N092Vm5yb2VFaXdBdHR2bjBacmxlNDdldF94cnRGNTVpMFJoZnh0dUxfYWJrQzdRS3puTlpzaEhaaUdLMUYyX3NDU3lid3oMCAliCAgAEAAYACAA' violates the following Content Security Policy directive: "default-src 'self' *.brightcove.com *.browser-intake-datadoghq.com *.coveo.com *.conversionsapigateway.com *.criteo.com *.criteo.net *.demdex.net *.doubleclick.net *.eloqua.com *.ensighten.com *.experian.com *.experiancs.com *.experiandirect.com *.eppo.cloud *.freecreditreport.com *.googleapis.com *.googlesyndication.com *.gstatic.com *.teads.tv *.pinterest.com *.hotjar.com *.iesnare.com *.infogram.com *.liadm.com *.linkedin.com *.optmster.com *.optmstr.com *.optnmnstr.co *.optnmnstr.com *.optnmstr.com *.powerreviews.com *.reddit.com *.soundcloud.com *.tableau.com *.twitter.com *.twonil.com *.vimeo.com *.yahooapis.com *.youtube.com *.hubapi.com *.hubspot.com *.tt.omtrdc.net *.yobi.ai adobetag.com analytics-ipv6.tiktokw.us api-js.mixpanel.com api.company-target.com api.experianmarketingservices.com api.instagram.com api.jublo.net api.measureone.com api.omniture.com app.optinmonster.com apps.rokt.com assets.adobedtm.com bat.bing.com businesscreditfacts.com cdn.appdynamics.com cdn.lr-ingest.com cdn.syndication.twimg.com cdn.taboola.com cdnjs.cloudflare.com code.highcharts.com connect.facebook.net contractorcheck.com cds.taboola.com d.net.google.com d.turn.com dev.visualwebsiteoptimizer.com embed.pscp.tv experianservicescorp.122.2o7.net fbcdn.net forms.hubspot.com freecreditscore.com graph.facebook.com googleapis.com hooks.slack.com ik.imagekit.io img.en25.com info.inbound-bis.com itunes.apple.com js.bizographics.com js.hs-analytics.net js.hs-scripts.com js.hscollectedforms.net jsonip.com js.usemessages.com libraweb.tiktokw.us loadm.exelator.com m.addthis.com m.addthisedge.com maps.google.com maxcdn.bootstrapcdn.com mediaplayer.yahoo.com moodysanalytics.com mpc2-prod-21-is5qnl632q-uc.a.run.app optinmonster.com pixel.tapad.com play.google.com players.brightcove.net plus.google.com pt.ispot.tv pips.taboola.com rtd-tm.everesttech.net s.amazon-adsystem.com s.yimg.com s.ytimg.com s7.addthis.com scontent.cdninstagram.com scontent.xx.fbcdn.net scripts.demandbase.com secure.adnxs.com secure.leadback.advertising.com securetracking.adsprotection.com *.xg4ken.com smartbusinessreports.com https://sc-static.net *.snapchat.com snap.licdn.com sp.analytics.yahoo.com ssl.google-analytics.com static.ads-twitter.com sync.tidaltv.com trc-events.taboola.com tag.demandbase.com tagmanager.google.com trc.taboola.com twemoji.maxcdn.com video.xx.fbcdn.net vjs.zencdn.net widget.surveymonkey.com widgets.outbrain.com https://*.brightfunnel.com http://*.hotjar.com https://*.hotjar.com https://*.hsadspixel.net https://*.jsdelivr.net https://*.mstrlytcs.com https://a.optmnstr.com https://api.optmnstr.com https://autocomplete.demandbase.com http://autocomplete.demandbase.com https://cdn.allitrk.com https://apps.rokt-api.com https://www.redditstatic.com https://collector.allitrk.com ws://*.hotjar.com wss://*.hotjar.com *.edq.com www.facebook.com www.google-analytics.com www.google.com http://www.google.com www.googleadservices.com www.googletagmanager.com www.slideshare.net www.youtube.com globalsiteanalytics.com *.mczbf.com *.sjwoe.com analytics.tiktok.com cdn.pdst.fm *.trustpilot.com trkn.us us-central1-adaptive-growth.cloudfunctions.net sink.pdst.fm *.qualtrics.com analytics.google.com *.nextdoor.com *.google.com *.yoast.com yoast.com *.datadoghq-browser-agent.com *.datadoghq.com *.yieldmo.com pix.pub *.biocatch.com *.we-stats.com activitymap.adobe.com *.branch.io app.link *.app.link s.pinimg.com unpkg.com *.inmobicdn.net analytics-sm.com browser-intake-datadoghq.com google.com tags.srv.stackadapt.com nextinsure.com *.nextinsure.com *.save.auto *.supermoney.com *.ownup.com pixels.spotify.com js.adsrvr.org match.adsrvr.org sync.adsrvr.org insight.adsrvr.org pixel.adsrvr.org servedby.thedmp.com global.prod.uidapi.com prod.euid.eu *.money.com 'unsafe-inline' 'unsafe-eval' blob:". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback. The action has been blocked.
Failed to load resource: net::ERR_FAILED
Failed to load resource: net::ERR_FAILED
Failed to load resource: net::ERR_FAILED
Failed to load resource: net::ERR_FAILED
Fetch API cannot load https://bded8a3c6ae-1-1053047382554.us-central1.run.app/events?cee=no. Refused to connect because it violates the document's Content Security Policy.
Fetch API cannot load https://bded8a3c6ae-1-1053047382554.us-central1.run.app/events?cee=no. Refused to connect because it violates the document's Content Security Policy.
Fetch API cannot load https://ov-1d104299d2a447049cdc73700c9309f7.ecs.us-west-2.on.aws/events?cee=no. Refused to connect because it violates the document's Content Security Policy.
Fetch API cannot load https://ov-1d104299d2a447049cdc73700c9309f7.ecs.us-west-2.on.aws/events?cee=no. Refused to connect because it violates the document's Content Security Policy.

Issues logged to the `Issues` panel in Chrome Devtools indicate unresolved problems. They can come from network request failures, insufficient security controls, and other browser concerns. Open up the Issues panel in Chrome DevTools for more details on each issue.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Issue type
Content security policy

Source maps translate minified code to the original source code. This helps developers debug in production. In addition, Lighthouse is able to provide further insights. Consider deploying source maps to take advantage of these benefits. Learn more about source maps.

Why this matters

Performance issues directly impact user engagement and conversion rates.

●Uses HTTPS
●Avoids third-party cookies
●Allows users to paste into input fields
●Avoids requesting the geolocation permission on page load
●Avoids requesting the notification permission on page load
●Displays images with correct aspect ratio
●Serves images with appropriate resolution
●Page has the HTML doctype
●Properly defines charset
●Ensure CSP is effective against XSS attacks
●Ensure proper origin isolation with COOP
●Mitigate DOM-based XSS with Trusted Types
●Detected JavaScript libraries
○Redirects HTTP traffic to HTTPS
○Use a strong HSTS policy
○Mitigate clickjacking with XFO or CSP
92

SEO

These checks ensure that your page is following basic search engine optimization advice. There are many additional factors Lighthouse does not score here that may affect your search ranking, including performance on Core Web Vitals. Learn more about Google Search Essentials.

Content Best Practices

Descriptive link text helps search engines understand your content. Learn how to make links more accessible.

Why this matters

Performance issues directly impact user engagement and conversion rates.

Format your HTML in a way that enables crawlers to better understand your app’s content.

○Structured data is valid
●Page isn’t blocked from indexing
●Document has a `<title>` element
●Document has a meta description
●Page has successful HTTP status code
●Links are crawlable
●robots.txt is valid
●Image elements have `[alt]` attributes
●Document has a valid `hreflang`
●Document has a valid `rel=canonical`

Send Feedback