Open
Cached
·
just now
12
Headers
Detected Technologies from Headers
Gravatar
Amazon S3
Chameleon
ClearBit
Cloudflare
Active incidents
Cloudflare CDN
Drift
Google Analytics
Google API JS Client
Google DoubleClick
Google Search
Google Static File Front End
Google Tag Manager
Hotjar
HubSpot
HubSpot Analytics
jsDelivr
Microsoft 365
Mixpanel
Plaid
Segment
Sentry
Slack
unpkg
WordPress
Zendesk
Google Cloud
Google Cloud Storage
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=3600; includeSubDomains
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
same-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Vary
Cookie, origin
connection: close vary: Cookie, origin
Caching Headers
No caching headers found
Content Headers
Content-Length
11388
Content-Type
text/html; charset=utf-8
content-length: 11388 content-type: text/html; charset=utf-8
Server Headers
No server headers found
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Wed, 06 May 2026 20:41:51 GMT
date: Wed, 06 May 2026 20:41:51 GMT
Recommendations
Enable compression (gzip/brotli) to improve performance
Add Cache-Control header to optimize caching