Open
Cached
·
just now
13
Headers
Detected Technologies from Headers
PayPal
Microsoft Entra ID
AWS CloudFront
Google Maps
Beamer
Google Tag Manager
Brightcove
Google Sign-In
Braintree
HubSpot Forms
Google DoubleClick
Google Pay
Google Analytics
Recurly
Google Conversion Tracking
Firebase
Datadog
Google Static File Front End
Next.js
Google API JS Client
TikTok Analytics
Google Fonts
Looker
LinkedIn
Contentsquare
Stripe
HubSpot Analytics
unpkg
Google Search
Google Cloud Functions
Facebook
GitHub
Heap
TikTok
Statsig
Akamai
Active incidents
HubSpot
jsDelivr
ElevenLabs
Google Cloud
Google Cloud Storage
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
camera=(), microphone=(self), geolocation=(); +1 more
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
Performance Headers
Connection
close
Vary
Accept-Encoding
connection: close vary: Accept-Encoding
Caching Headers
Etag
"27bz0lh87q8vh"
etag: "27bz0lh87q8vh"
Content Headers
Content-Length
11501
Content-Type
text/html; charset=utf-8
content-length: 11501 content-type: text/html; charset=utf-8
Server Headers
X-Powered-By
Next.js
x-powered-by: Next.js
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Wed, 16 Sep 2026 02:30:57 GMT
X-Dns-Prefetch-Control
on
date: Wed, 16 Sep 2026 02:30:57 GMT x-dns-prefetch-control: on
Recommendations
Enable compression (gzip/brotli) to improve performance
Add Cache-Control header to optimize caching
Consider removing X-Powered-By header to hide server technology