wayfair.com
Access to this page has been denied
Last scanned Jul 18, 2026, 8:49 PM
Overall score
Great
Top issues to fix
8 issues found · 2 high priority
Missing Content-Security-Policy header
SecurityAdd a CSP to control which sources can run scripts — the strongest single defense against XSS.
No H1 heading found
SEOAdd exactly one H1 describing the page's main topic — it anchors the document outline for search engines and screen readers.
Missing X-Content-Type-Options header
SecurityAdd X-Content-Type-Options: nosniff to stop MIME-sniffing attacks.
Missing X-Frame-Options header
SecurityAdd X-Frame-Options (or a CSP frame-ancestors rule) to prevent clickjacking via hidden iframes.
1 cookie without Secure/HttpOnly flags
SecuritySet Secure and HttpOnly on session cookies so they can't leak over HTTP or be read by injected scripts.
Missing canonical link
SEOAdd <link rel="canonical"> so search engines know which URL variant to index.
+2 more issues — details in the sections below.
Summary
px-captcha. This website is hosted on Cloudflare. SEO is fair (70/100) and accessibility is excellent (90/100). Security scores good (75/100) and performance excellent (100/100). Top issue: Missing canonical link.
SEO
4 issue(s) found
Performance
655 ms
Security
HTTPS & header checks
Accessibility
1 issue(s) found
Meta tags
- Title
- Access to this page has been denied
- Description
- px-captcha
- Canonical
- Language
- en
- Charset
- utf-8
- Viewport
- width=device-width, initial-scale=1
- Robots meta
- Manifest
Technologies
Detected frameworks, languages, and tools.
No technologies detected.
Hosting & CDN
- Hosting provider
- Cloudflare
- CDN provider
- Cloudflare
- IP address
- 172.64.145.38
- ASN
- AS13335 (CLOUDFLARENET - Cloudflare, Inc., US)
DNS records
| Type | Value |
|---|---|
| A |
|
| AAAA | — |
| MX | — |
| TXT | — |
| NS | — |
| CAA | — |
| CNAME |
|
| IPv6 support | No |
TLS / SSL certificate
- Version
- TLS 1.3
- Issuer
- Let's Encrypt
- Subject
- wayfair.com
- Valid from
- Jul 8, 2026
- Valid to
- Oct 6, 2026
- Days until expiry
- 79
- SAN domains
- s.wayfair.com, secure.wayfair.com, t.wayfair.com, wayfair.com, www.wayfair.com
Security headers
- Strict-Transport-SecurityEnabled
- Content-Security-PolicyMissing
- X-Frame-OptionsMissing
- X-Content-Type-OptionsMissing
- Referrer-PolicyMissing
- Permissions-PolicyMissing
Compression: none · 1 cookie(s) observed
Content & assets
Headings
H1 0 · H2 0 · H3 0
Links
0 internal · 0 external · 0 broken
Images
0 total · 0 missing alt
Scripts / Styles
4 scripts · 0 stylesheets
JS / CSS size
377 KB · 2.4 KB
Page size
5.7 KB
Robots.txt & Sitemap
- robots.txt
- Found
- Disallow rules
- 51
- sitemap.xml
- Found
- URLs in sitemap
- -1
SEO issues
- Missing canonical link
- No H1 heading found
- No structured data (JSON-LD) found
- Missing OpenGraph tags
Accessibility issues
- No H1 heading found
Scan details
- Requested URL
- https://wayfair.com
- Final URL
- https://www.wayfair.com/
- HTTP status
- 429
- HTTP version
- HTTP/2
- Response time
- 655 ms
- HTML size
- 5.7 KB
- Redirect chain
- https://wayfair.com → https://www.wayfair.com/
Related websites
Same hosting provider
okx.com
Buy Bitcoin & Crypto | Crypto Exchange, App & Wallet | OKX
trustedstack.com
Advertising Technology Company
themeisle.com
Themeisle - Built to Last WordPress Themes & Plugins
onetrust.com
Responsible AI Governance & Compliance Solutions | OneTrust
cookielaw.org
Cookie Consent | Products | OneTrust
forter.com
Forter – Agentic Intelligence you can trust
Frequently asked questions
- What technology does wayfair.com use?
- We did not detect any specific technologies for wayfair.com in the latest scan.
- Is wayfair.com secure (HTTPS)?
- Yes. wayfair.com uses TLS 1.3 with a certificate issued by Let's Encrypt, valid until Oct 6, 2026.
- Who hosts wayfair.com?
- wayfair.com is hosted on Cloudflare, behind Cloudflare CDN.
- What is wayfair.com's SEO score?
- wayfair.com scored 70/100 for SEO in the latest analysis (fair).
- What is wayfair.com's overall website score?
- wayfair.com has an overall SiteGraph score of 83/100, combining SEO, performance, security, and accessibility.
OpenGraph & Twitter Card
OpenGraph
Twitter Card