Open
Cached
·
just now
35
Headers
Detected Technologies from Headers
Shields.io
Algolia
Atlassian
AWS CloudFront
Amazon S3
Contentful
Contentsquare
Active incidents
Figma
Google Analytics
Google DoubleClick
Google Fonts
Google Search
Google Static File Front End
Google Tag Manager
jsDelivr
LaunchDarkly
Active incidents
LinkedIn
OneTrust
Qualtrics
Segment
Sentry
Vimeo
WordPress
YouTube
Google Cloud
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=63072000; preload
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Vary
Accept-Encoding
connection: close vary: Accept-Encoding
Caching Headers
Cache-Control
max-age=30, s-maxage=30, stale-while-revalidate=30, stale-if-error=30, no-cache="Set-Cookie"
cache-control: max-age=30, s-maxage=30, stale-while-revalidate=30, stale-if-error=30, no-cache="Set-Cookie"
Content Headers
Content-Length
260389
Content-Type
text/html
content-length: 260389 content-type: text/html
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Alt-Svc
h3=":443"; ma=86400
Atl-Request-Id
dc4c612a-5013-4324-893d-6536ea850c63
Atl-Traceid
dc4c612a50134324893d6536ea850c63
Date
Mon, 27 Jul 2026 18:47:01 GMT
Nel
Report-To Group
endpoint-1
max-age: 10m
failure: 1.0%
include subdomains
Origin-Agent-Cluster
?1
Server-Timing
cdn-upstream-layer;desc="REC",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=0,cdn-upstream-fbl;dur=25,atl-edge;dur=23,atl-edge-internal;dur=9,atl-edge-upstream;dur=15,atl-edge-pop;desc="aws-us-east-1",cdn-cache-miss,cdn-pop;desc="IAD55-P2",cdn-rid;desc="dyzxlx2ogp7cU9XZZO0HwD4IMWmfdTva_mCFZHM3cV_wV-qKsXeTLQ==",cdn-downstream-fbl;dur=35
X-B3-Parentspanid
1b61a6b7b0223cdd
X-B3-Sampled
0
X-B3-Spanid
9b094c6066111e9a
X-B3-Traceid
dc4c612a50134324893d6536ea850c63
X-Dns-Prefetch-Control
off
X-Download-Options
noopen
X-Permitted-Cross-Domain-Policies
none
X-Ratelimit-Limit
400, 400;w=60
X-Ratelimit-Remaining
399
X-Ratelimit-Reset
59
alt-svc: h3=":443"; ma=86400
atl-request-id: dc4c612a-5013-4324-893d-6536ea850c63
atl-traceid: dc4c612a50134324893d6536ea850c63
date: Mon, 27 Jul 2026 18:47:01 GMT
nel: {"failure_fraction": 0.01, "include_subdomains": true, "max_age": 600, "report_to": "endpoint-1"}
origin-agent-cluster: ?1
report-to: {"endpoints": [{"url": "https://dz8aopenkvv6s.cloudfront.net"}], "group": "endpoint-1", "include_subdomains": true, "max_age": 600}
server-timing: cdn-upstream-layer;desc="REC",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=0,cdn-upstream-fbl;dur=25,atl-edge;dur=23,atl-edge-internal;dur=9,atl-edge-upstream;dur=15,atl-edge-pop;desc="aws-us-east-1",cdn-cache-miss,cdn-pop;desc="IAD55-P2",cdn-rid;desc="dyzxlx2ogp7cU9XZZO0HwD4IMWmfdTva_mCFZHM3cV_wV-qKsXeTLQ==",cdn-downstream-fbl;dur=35
via: 1.1 c1d6a7a9856899a6462bae2246daa42e.cloudfront.net (CloudFront)
x-amz-cf-id: dyzxlx2ogp7cU9XZZO0HwD4IMWmfdTva_mCFZHM3cV_wV-qKsXeTLQ==
x-amz-cf-pop: IAD55-P2
x-b3-parentspanid: 1b61a6b7b0223cdd
x-b3-sampled: 0
x-b3-spanid: 9b094c6066111e9a
x-b3-traceid: dc4c612a50134324893d6536ea850c63
x-cache: Miss from cloudfront
x-dns-prefetch-control: off
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-ratelimit-limit: 400, 400;w=60
x-ratelimit-remaining: 399
x-ratelimit-reset: 59
Recommendations
Enable compression (gzip/brotli) to improve performance