Open
Cached
·
2h ago
17
Headers
Detected Technologies from Headers
AWS CloudFront
AWS
Azure Blob Storage
AzureFrontDoor
Beamer
Cloudinary
GIPHY
Google Analytics
Google DoubleClick
Google reCAPTCHA
Google Search
Google Static File Front End
Google Tag Manager
Hotjar
Intercom
jsDelivr
Mixpanel
Plausible Analytics
Salesforce Sites
Sanity
Segment
Sentry
Unsplash
Vimeo
YouTube
Google Cloud
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
Good
upgrade-insecure-requests; block-all-mixed-content; default-src; +11 more
Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Strengthen CSP by removing 'unsafe-eval'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Accept-Ranges
bytes
Connection
close
accept-ranges: bytes connection: close
Caching Headers
Cache-Control
no-cache, no-store
Expires
Thu, 01 Jan 1970 00:00:00 GMT
Pragma
no-cache
cache-control: no-cache, no-store expires: Thu, 01 Jan 1970 00:00:00 GMT pragma: no-cache
Content Headers
Content-Length
1496
Content-Type
text/html;charset=UTF-8
content-length: 1496 content-type: text/html;charset=UTF-8
Server Headers
No server headers found
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Thu, 07 May 2026 16:48:23 GMT
Request-Context
appId=cid-v1:c1c1cc63-a79d-4e64-b689-79869b6db8e2
X-Azure-Ref
20260507T164823Z-1786d5f9b4brgfd9hC1BNAybts0000000bzg000000000fmu
X-Cache
CONFIG_NOCACHE
date: Thu, 07 May 2026 16:48:23 GMT request-context: appId=cid-v1:c1c1cc63-a79d-4e64-b689-79869b6db8e2 x-azure-ref: 20260507T164823Z-1786d5f9b4brgfd9hC1BNAybts0000000bzg000000000fmu x-cache: CONFIG_NOCACHE
Recommendations
Enable compression (gzip/brotli) to improve performance