Open
Cached
·
just now
19
Headers
Detected Technologies from Headers
AWS CloudFront
Alchemy
AWS
Active incidents
Amazon S3
Cloudflare CDN
CoinGecko
Contentful
Front
GitHub
Google Analytics
Google Cloud Storage
Google Search
Google Static File Front End
Google Tag Manager
hCaptcha
Intercom
LaunchDarkly
Active incidents
MoonPay
Okta
OneTrust
Sentry
Vercel
Google Cloud
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=63072000
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Transfer-Encoding
chunked
Vary
accept-encoding
connection: close transfer-encoding: chunked vary: accept-encoding
Caching Headers
Age
1666
Cache-Control
no-cache, no-store, must-revalidate
Last-Modified
Mon, 02 Nov 2026 21:45:39 GMT
age: 1666 cache-control: no-cache, no-store, must-revalidate last-modified: Mon, 02 Nov 2026 21:45:39 GMT
Content Headers
Content-Disposition
inline
Content-Type
text/html; charset=utf-8
content-disposition: inline content-type: text/html; charset=utf-8
CORS Headers
Access-Control-Allow-Origin
*
access-control-allow-origin: *
Cookies Headers
Other Headers
Date
Mon, 02 Nov 2026 22:13:26 GMT
cf-cache-status: DYNAMIC cf-ray: a5467c85f9240611-IAD date: Mon, 02 Nov 2026 22:13:26 GMT x-vercel-cache: HIT x-vercel-id: iad1::djfjr-1793657606110-a65749053c43
Recommendations
Enable compression (gzip/brotli) to improve performance