Open
Cached
·
3h ago
25
Headers
Detected Technologies from Headers
PayPal
AWS API Gateway
AWS CloudFront
YouTube
Google AdSense
Google Tag Manager
Azure Blob Storage
Envoy
Google DoubleClick
Google Analytics
Microsoft Advertising
Google Conversion Tracking
Loggly
Google Static File Front End
LaunchDarkly
Next.js
Google API JS Client
Google Fonts
Hotjar
LinkedIn
LiveChat
unpkg
Google Search
Facebook
Amazon S3
OneTrust
Salesforce Sites
Storyblok
AWS
Active incidents
jQuery
Salesforce Pardot
Taboola
Vimeo
Sentry
Google Cloud
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Vary
Accept-Encoding
connection: close vary: Accept-Encoding
Caching Headers
Cache-Control
private, no-cache, no-store, max-age=0, must-revalidate
Etag
"kktpy6sdyv1jtl"
cache-control: private, no-cache, no-store, max-age=0, must-revalidate etag: "kktpy6sdyv1jtl"
Content Headers
Content-Length
72947
Content-Type
text/html; charset=utf-8
content-length: 72947 content-type: text/html; charset=utf-8
Server Headers
Server
envoy
X-Powered-By
Next.js
server: envoy x-powered-by: Next.js
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Mon, 11 May 2026 22:23:17 GMT
Req-Id
90e330d9-cc77-4027-a415-7ca80dcad3e6
Via
1.1 82caf3289f68886de3a67a0f5dcf96c8.cloudfront.net (CloudFront)
X-Amz-Cf-Id
L4DaPZ64Ju0Kub-A8LvBRATYkAMs30stCBj64fECoNrabdwqKw03sg==
X-Amz-Cf-Pop
IAD61-P4
X-Cache
Miss from cloudfront
X-Dns-Prefetch-Control
off
X-Download-Options
noopen
X-Envoy-Upstream-Service-Time
40
X-Permitted-Cross-Domain-Policies
none
date: Mon, 11 May 2026 22:23:17 GMT req-id: 90e330d9-cc77-4027-a415-7ca80dcad3e6 via: 1.1 82caf3289f68886de3a67a0f5dcf96c8.cloudfront.net (CloudFront) x-amz-cf-id: L4DaPZ64Ju0Kub-A8LvBRATYkAMs30stCBj64fECoNrabdwqKw03sg== x-amz-cf-pop: IAD61-P4 x-cache: Miss from cloudfront x-dns-prefetch-control: off x-download-options: noopen x-envoy-upstream-service-time: 40 x-permitted-cross-domain-policies: none
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology