Open Cached · just now
38 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=63072000
Content-Security-Policy
Basic
default-src; script-src; connect-src; +11 more
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

Performance Headers

2 headers
Transfer-Encoding
Performance
chunked
Vary
Performance
rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch

Caching Headers

2 headers
Age
Caching
133
Cache-Control
Caching
public, max-age=0, must-revalidate

Content Headers

1 headers
Content-Type
Content
text/html; charset=utf-8

Server Headers

2 headers
Server
Server
Vercel
X-Powered-By
Server
Next.js

CORS Headers

0 headers
No CORS headers found

Cookies Headers

1 headers
Set-Cookie
Cookies
generaltranslation.locale-routing-enabled=true; Path=/

Other Headers

28 headers
Accept
Other
*/*
Accept-Ch
Other
Sec-CH-UA-Arch, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Bitness
Date
Other
Mon, 03 Nov 2025 09:06:38 GMT
Forwarded
Other
for=204.93.227.22;host=cursor.com;proto=https
Link
Other
</marketing-static/_next/static/media/006940878f5e6885.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </marketing-static/_next/static/media/4d47f1cf2188c753-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </marketing-static/_next/static/media/89358bea2c069d9d-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </marketing-static/_next/static/media/c0b22bcfa1a173f2.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </marketing-static/_next/static/media/d3293b264284c7e4-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </marketing-static/_next/static/media/da0a7633fc8b7288-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </marketing-static/_next/static/media/155cae559bbd1a77-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </marketing-static/_next/static/media/25460892714ab800-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </marketing-static/_next/static/media/4de1fea1a954a5b6-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </marketing-static/_next/static/media/55c20a7790588da9-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </marketing-static/_next/static/media/6d664cce900333ee-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </marketing-static/_next/static/media/6ee7df5b3965574d-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </marketing-static/_next/static/media/756f9c755543fe29-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </marketing-static/_next/static/media/7ff6869a1704182a-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </marketing-static/_next/static/media/9364c9a9ce248cb1-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </marketing-static/_next/static/media/b5215411e8ce7768-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
User-Agent
Other
mint/1.7.1
X-Forwarded-For
Other
204.93.227.22
X-Forwarded-Host
Other
cursor.com
X-Forwarded-Proto
Other
https
X-Generaltranslation-Locale
Other
en-US
X-Matched-Path
Other
/en-US
X-Nextjs-Prerender
Other
1
X-Nextjs-Stale-Time
Other
300
X-Real-Ip
Other
204.93.227.22
X-Vercel-Cache
Other
HIT
X-Vercel-Id
Other
iad1:iad1::iad1::6rv9r-1762160933728-6941d6b139e9
X-Vercel-Ip-As-Number
Other
30081
X-Vercel-Ip-City
Other
Chicago
X-Vercel-Ip-Continent
Other
NA
X-Vercel-Ip-Country
Other
US
X-Vercel-Ip-Country-Region
Other
IL
X-Vercel-Ip-Latitude
Other
41.8835
X-Vercel-Ip-Longitude
Other
-87.6305
X-Vercel-Ip-Postal-Code
Other
60602
X-Vercel-Ip-Timezone
Other
America/Chicago
X-Vercel-Ja3-Digest
Other
c4f75f5ad8c11e8167a874be4326b2fd
X-Vercel-Ja4-Digest
Other
t13d640700_70d83611e2fb_bc99fca5e491
X-Vercel-Proxied-For
Other
204.93.227.22

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology

Analysis completed in 103ms