Cached · just now
21 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=15768000
Content-Security-Policy
Basic
default-src; connect-src; img-src; +12 more
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

Performance Headers

3 headers
Connection
Performance
close
Transfer-Encoding
Performance
chunked
Vary
Performance
Accept-Encoding

Caching Headers

1 headers
Cache-Control
Caching
private, no-cache, no-store, max-age=0, must-revalidate

Content Headers

1 headers
Content-Type
Content
text/html; charset=utf-8

Server Headers

0 headers
No server headers found

CORS Headers

0 headers
No CORS headers found

Cookies Headers

0 headers
No cookies headers found

Other Headers

10 headers
Alt-Svc
Other
h3=":443"; ma=86400
Date
Other
Thu, 01 Jan 2026 12:05:01 GMT
Feature-Policy
Other
geolocation 'none'; camera 'none'; microphone 'none';
Link
Other
<https://api-iam.intercom.io>; rel=preconnect, <https://cookie-cdn.cookiepro.com/>; rel=preconnect, <https://www.google-analytics.com>; rel=dns-prefetch, <https://api-iam.intercom.io>; rel=dns-prefetch, </_next/static/media/8e9860b6e62d6359-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", <https://images.apifyusercontent.com/5TrEQbTFGVZia_ZUYmobfvO6YvVxiQX0l3HXv7x7-uU/rs:fill:76:76/cb:1/aHR0cHM6Ly9hcGlmeS1pbWFnZS11cGxvYWRzLXByb2QuczMuYW1hem9uYXdzLmNvbS9HZFdDa3hCdEtXT3NLamRjaC96dExHNWhUM1pMaEFGRmVLTi1UaWtUb2tfU2NyYXBlci5wbmc.webp>; rel=preload; as="image"; crossorigin="", <https://images.apifyusercontent.com/w_ck4XpjhCHXQbGbZn6OKvdJM83zSWuIQz7lOsxie7U/rs:fill:36:36/cb:1/aHR0cHM6Ly9hcGlmeS1pbWFnZS11cGxvYWRzLXByb2QuczMuYW1hem9uYXdzLmNvbS84V3JkTVBpTDROcDJrZzdGQy9KcGZFRHFZeUg3V0Zld1kyQy1jbG9ja3dvcmtzLnBuZw.webp>; rel=preload; as="image"
Via
Other
1.1 6babe802f42cc1b949e7b8cbdf5a4554.cloudfront.net (CloudFront)
X-Amz-Cf-Id
Other
gW1c2SUwDSGuqBEfha1TWRTNOeSwCgGu4XMQGMWO8nPMzmbHwjkLFA==
X-Amz-Cf-Pop
Other
IAD61-P10
X-Cache
Other
Miss from cloudfront
X-Download-Options
Other
noopen
X-Permitted-Cross-Domain-Policies
Other
none

Recommendations

Enable compression (gzip/brotli) to improve performance