DNS Gurus
Cached · just now
12 Headers

Detected Technologies from Headers

See all in URL Inspect 1
Nginx logo Nginx

HTTP Security Headers

Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains;, max-age=31536000; includeSubDomains
Content-Security-Policy
Good
default-src Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Consider adding 'preload' to HSTS for maximum security
  • • Strengthen CSP by removing 'unsafe-eval'
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

Performance Headers

Connection
Performance
close

Caching Headers

No caching headers found

Content Headers

Content-Length
Content
139
Content-Type
Content
text/html; charset=utf-8

Server Headers

Server
Nginx logo
Server
nginx

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Date
Other
Wed, 01 Apr 2026 21:56:56 GMT
X-Content-Security-Policy
Other
default-src 'self'; media-src 'self' storage.googleapis.com; style-src 'self' *.billwerk.plus/static/ 'unsafe-inline' cdn.candu.ai fonts.googleapis.com p.typekit.net connect.billwerk.plus reepay.integromat.celonis.com js.userflow.com; font-src 'self' *.billwerk.plus/static/ fonts.gstatic.com use.typekit.net data: connect.billwerk.plus reepay.integromat.celonis.com; img-src 'self' *.billwerk.plus/static/ data: https://ipm.reepay.integromat.celonis.com secure.gravatar.com storage.googleapis.com candu.ai cdn.candu.ai media.candulabs.com media.candu.ai *.visualwebsiteoptimizer.com ct.capterra.com googleads.g.doubleclick.net google.cz/ads/ google.com facebook.com px.ads.linkedin.com https://*.chameleon.io blob: *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.analytics.google.com snap.licdn.com stats.g.doubleclick.net integromat-dataplane.rudderstack.com *.dataplane.rudderstack.com connect.billwerk.plus reepay.integromat.celonis.com js.userflow.com; connect-src 'self' *.billwerk.plus/static/ wss://connect.billwerk.plus api.candu.ai cdn.candu.ai cdn.rudderlabs.com api.rudderlabs.com api.rudderstack.com *.visualwebsiteoptimizer.com lottie.host https://*.chameleon.io www.redditstatic.com www.conversion-config.reddit.com px.ads.linkedin.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.analytics.google.com snap.licdn.com stats.g.doubleclick.net integromat-dataplane.rudderstack.com *.dataplane.rudderstack.com connect.billwerk.plus reepay.integromat.celonis.com e.userflow.com js.userflow.com wss://e.userflow.com; frame-src 'self' *.billwerk.plus/static/ media.candulabs.com intmat.typeform.com https://www.youtube.com *.visualwebsiteoptimizer.com js.stripe.com www.google.com https://*.chameleon.io www.figma.com www.googletagmanager.com connect.billwerk.plus reepay.integromat.celonis.com; script-src 'sha256-of+a9aPTnPYS04u4ePe2GkuLce8r4g5jXwUbTuo1ejU=' 'sha256-ab7+86iy2trhfn2hEasJlPviIottusZE38DfnFNmavQ=' 'sha256-FDyPg8CqqIpPAfGVKx1YeKduyLs0ghNYWII21wL+7HM=' 'sha256-fO9C84zRj6RGHo8LmSgMbl/YErhsmuLYIdAK63S9PHY=' 'sha256-mttCHcoi0fCPLUdIaQkZK7d69AQqXoP5j/2L7hZeuLY=' 'sha256-m6JJcDMA4y/5v7dP0NzvzVICWUuYvukaY0La3XevntU=' 'sha256-Uz0yn00PqpvyPuK+MptaAirzRCPwuCU4Vhj/iAbfJxk=' 'sha256-HGbDyeylSljYrgdPOIlqxerlaTXJjBmcJNDnzL5YMZI=' 'sha256-JAE+/aZBiNrmxnLQJi+7uvsnhGo1hui0G3n/N/wZEik=' 'sha256-VLja89ZYVjOxe3bRV7zNlAcGDAC5nvCMZH94ho/ugWM=' 'sha256-9RfES4v+Doq90DL69vHLe/OiCdKDydfLlkcn+uA+Aqs=' 'sha256-v8ihz9payVVJTilwJdhAo7J12Ii7dvEfrgyeOhLSVwM=' 'sha256-k/2sSUlVW8qt12RV8gkK48N7vojjiZW1VL0QxwBDwS8=' 'sha256-eKzz+0MWl7AhIpG3fZ+btLL7C6cm0+AaA4otwe+Og4U=' js.userflow.com js.getuserflow.com www.youtube.com *.visualwebsiteoptimizer.com cdn.candu.ai js.stripe.com www.google.com www.gstatic.com www.googletagmanager.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.analytics.google.com snap.licdn.com stats.g.doubleclick.net integromat-dataplane.rudderstack.com *.dataplane.rudderstack.com 'nonce-SF0L+rukskAJkqqlvWBTwQ==' 'strict-dynamic'; object-src 'self' *.billwerk.plus/static/ connect.billwerk.plus reepay.integromat.celonis.com; worker-src 'self' blob:
X-Webkit-Csp
Other
default-src 'self'; media-src 'self' storage.googleapis.com; style-src 'self' *.billwerk.plus/static/ 'unsafe-inline' cdn.candu.ai fonts.googleapis.com p.typekit.net connect.billwerk.plus reepay.integromat.celonis.com js.userflow.com; font-src 'self' *.billwerk.plus/static/ fonts.gstatic.com use.typekit.net data: connect.billwerk.plus reepay.integromat.celonis.com; img-src 'self' *.billwerk.plus/static/ data: https://ipm.reepay.integromat.celonis.com secure.gravatar.com storage.googleapis.com candu.ai cdn.candu.ai media.candulabs.com media.candu.ai *.visualwebsiteoptimizer.com ct.capterra.com googleads.g.doubleclick.net google.cz/ads/ google.com facebook.com px.ads.linkedin.com https://*.chameleon.io blob: *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.analytics.google.com snap.licdn.com stats.g.doubleclick.net integromat-dataplane.rudderstack.com *.dataplane.rudderstack.com connect.billwerk.plus reepay.integromat.celonis.com js.userflow.com; connect-src 'self' *.billwerk.plus/static/ wss://connect.billwerk.plus api.candu.ai cdn.candu.ai cdn.rudderlabs.com api.rudderlabs.com api.rudderstack.com *.visualwebsiteoptimizer.com lottie.host https://*.chameleon.io www.redditstatic.com www.conversion-config.reddit.com px.ads.linkedin.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.analytics.google.com snap.licdn.com stats.g.doubleclick.net integromat-dataplane.rudderstack.com *.dataplane.rudderstack.com connect.billwerk.plus reepay.integromat.celonis.com e.userflow.com js.userflow.com wss://e.userflow.com; frame-src 'self' *.billwerk.plus/static/ media.candulabs.com intmat.typeform.com https://www.youtube.com *.visualwebsiteoptimizer.com js.stripe.com www.google.com https://*.chameleon.io www.figma.com www.googletagmanager.com connect.billwerk.plus reepay.integromat.celonis.com; script-src 'sha256-of+a9aPTnPYS04u4ePe2GkuLce8r4g5jXwUbTuo1ejU=' 'sha256-ab7+86iy2trhfn2hEasJlPviIottusZE38DfnFNmavQ=' 'sha256-FDyPg8CqqIpPAfGVKx1YeKduyLs0ghNYWII21wL+7HM=' 'sha256-fO9C84zRj6RGHo8LmSgMbl/YErhsmuLYIdAK63S9PHY=' 'sha256-mttCHcoi0fCPLUdIaQkZK7d69AQqXoP5j/2L7hZeuLY=' 'sha256-m6JJcDMA4y/5v7dP0NzvzVICWUuYvukaY0La3XevntU=' 'sha256-Uz0yn00PqpvyPuK+MptaAirzRCPwuCU4Vhj/iAbfJxk=' 'sha256-HGbDyeylSljYrgdPOIlqxerlaTXJjBmcJNDnzL5YMZI=' 'sha256-JAE+/aZBiNrmxnLQJi+7uvsnhGo1hui0G3n/N/wZEik=' 'sha256-VLja89ZYVjOxe3bRV7zNlAcGDAC5nvCMZH94ho/ugWM=' 'sha256-9RfES4v+Doq90DL69vHLe/OiCdKDydfLlkcn+uA+Aqs=' 'sha256-v8ihz9payVVJTilwJdhAo7J12Ii7dvEfrgyeOhLSVwM=' 'sha256-k/2sSUlVW8qt12RV8gkK48N7vojjiZW1VL0QxwBDwS8=' 'sha256-eKzz+0MWl7AhIpG3fZ+btLL7C6cm0+AaA4otwe+Og4U=' js.userflow.com js.getuserflow.com www.youtube.com *.visualwebsiteoptimizer.com cdn.candu.ai js.stripe.com www.google.com www.gstatic.com www.googletagmanager.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.analytics.google.com snap.licdn.com stats.g.doubleclick.net integromat-dataplane.rudderstack.com *.dataplane.rudderstack.com 'nonce-SF0L+rukskAJkqqlvWBTwQ==' 'strict-dynamic'; object-src 'self' *.billwerk.plus/static/ connect.billwerk.plus reepay.integromat.celonis.com; worker-src 'self' blob:

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching