Open
Cached
·
just now
21
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
Strong
default-src; script-src; script-src-elem; +7 more
default-src 'self' *.tradier.com; script-src 'self' connect.facebook.net www.google.com www.gstatic.com www.googletagmanager.com; script-src-elem 'self' www.google-analytics.com www.google.com www.gstatic.com www.googletagmanager.com va.vercel-scripts.com/v1/script.debug.js vercel.live/_next-live/feedback/feedback.js connect.facebook.net d7zve4d3u0dfm.cloudfront.net/production/RHb02cf4bc2e.js 'sha256-1e5RR2OpHhuX2h0Bat19DsNTmqbo4M3T1pqfeTXCHaA=' 'sha256-kEJ5aQMa02EiDjc71j+UBRflqEvTIegPY59+Mem27gw=' 'sha256-Zgt8BlRLx38o8UsFXEFmnzyAwwsuj14TY+UESua2NVQ='; connect-src 'self' *.tradier.com *.sentry.io *.mixpanel.com *.google.com www.facebook.com *.doubleclick.net app.referralhero.com/widget/MFbee47ca5d9/post; img-src 'self' data: www.gstatic.com *.facebook.com; style-src 'self' fonts.googleapis.com; base-uri 'self'; form-action 'self'; font-src 'self' fonts.gstatic.com data:; frame-src 'self' www.google.com www.gstatic.com *.doubleclick.net
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Consider adding Permissions-Policy to control browser features
Performance Headers
3 headers
Accept-Ranges
Performance
bytes
Connection
Performance
close
Vary
Performance
Origin
Caching Headers
4 headers
Age
Caching
295879
Cache-Control
Caching
public, max-age=0, must-revalidate
Etag
Caching
"4a9588a10a983a99d332910ddfb6a8ed"
Last-Modified
Caching
Tue, 06 Jan 2026 17:22:55 GMT
Content Headers
3 headers
Content-Disposition
Content
inline
Content-Length
Content
1219
Content-Type
Content
text/html; charset=utf-8
Server Headers
1 headers
Server
Server
Vercel
CORS Headers
1 headers
Access-Control-Allow-Origin
Cors
https://auth.tradier.com
Cookies Headers
0 headers
No cookies headers found
Other Headers
3 headers
Date
Other
Sat, 10 Jan 2026 03:34:14 GMT
X-Vercel-Cache
Other
HIT
X-Vercel-Id
Other
iad1::kwnbv-1768016054962-03c2a39713d0
Recommendations
Enable compression (gzip/brotli) to improve performance