Open
Cached
·
just now
17
Headers
Detected Technologies from Headers
Amplitude
Amazon S3
Bing
Cloudflare
Cloudflare CDN
Google Analytics
Google API JS Client
Google DoubleClick
Google Search
Google Static File Front End
Google Tag Manager
jsDelivr
Microsoft Clarity
Next.js
Plaid
Pusher
Statuspage
Stripe
Supabase
Active incidents
Tapfiliate
Vercel
Active incidents
Google Cloud
Google Cloud Storage
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=63072000
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Transfer-Encoding
chunked
Vary
rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
connection: close transfer-encoding: chunked vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
Caching Headers
Age
0
Cache-Control
private, no-cache, no-store, max-age=0, must-revalidate
age: 0 cache-control: private, no-cache, no-store, max-age=0, must-revalidate
Content Headers
Content-Type
text/html; charset=utf-8
content-type: text/html; charset=utf-8
Server Headers
server: Vercel x-powered-by: Next.js
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Mon, 17 Aug 2026 17:33:45 GMT
Link
URL
/theme/flatfee/logo-text.svg
rel=preload
as=image
URL
/theme/fs/logo-text.svg
rel=preload
as=image
URL
/theme/neko/logo-text.svg
rel=preload
as=image
URL
/theme/default/logo-text.svg
rel=preload
as=image
X-Matched-Path
/
date: Mon, 17 Aug 2026 17:33:45 GMT link: </theme/flatfee/logo-text.svg>; rel=preload; as="image", </theme/fs/logo-text.svg>; rel=preload; as="image", </theme/neko/logo-text.svg>; rel=preload; as="image", </theme/default/logo-text.svg>; rel=preload; as="image" x-matched-path: / x-vercel-cache: MISS x-vercel-id: iad1::sfo1::79p7j-1786988024883-3926d1bab88b
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology