Open
Cached
·
just now
21
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=63072000
Content-Security-Policy
Basic
default-src; script-src; style-src; +7 more
default-src *;script-src * 'unsafe-eval' 'unsafe-inline';style-src * 'unsafe-inline';img-src * blob: data:;font-src *;connect-src *;object-src *;base-uri *;form-action *;upgrade-insecure-requests;
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(self), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(self), midi=(), navigation-override=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(self), clipboard-write=(self)
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
Performance Headers
2 headers
Accept-Ranges
Performance
bytes
Connection
Performance
close
Caching Headers
6 headers
Age
Caching
68946
Cache-Control
Caching
no-cache, no-store, must-revalidate, private
Etag
Caching
"7e12b7b575cfa74ca3123c708d86e09e"
Expires
Caching
0
Last-Modified
Caching
Wed, 14 Jan 2026 08:38:18 GMT
Pragma
Caching
no-cache
Content Headers
3 headers
Content-Disposition
Content
inline
Content-Length
Content
2255
Content-Type
Content
text/html; charset=utf-8
Server Headers
1 headers
Server
Server
Vercel
CORS Headers
1 headers
Access-Control-Allow-Origin
Cors
*
Cookies Headers
0 headers
No cookies headers found
Other Headers
4 headers
Date
Other
Thu, 15 Jan 2026 03:47:24 GMT
X-Matched-Path
Other
/
X-Vercel-Cache
Other
HIT
X-Vercel-Id
Other
iad1::q7hvv-1768448844816-8a04c2b46ed4
Recommendations
Enable compression (gzip/brotli) to improve performance