DNS Gurus
Cached · just now
12 Headers

Detected Technologies from Headers

See all in URL Inspect 8
AWS logo AWS BootstrapCDN logo BootstrapCDN Google Analytics logo Google Analytics Google Tag Manager logo Google Tag Manager Hotjar logo Hotjar jsDelivr logo jsDelivr Next.js logo Next.js OneTrust logo OneTrust

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
Content-Security-Policy
Google Analytics logo
Basic
default-src; font-src; style-src; +5 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

Performance Headers

Connection
Performance
close
Vary
Performance
Accept-Encoding

Caching Headers

Cache-Control
Caching
s-maxage=1, stale-while-revalidate
Etag
Caching
"153432-/+PofHUFjV2RjZEQdfpbxPXylrQ"

Content Headers

Content-Length
Content
1389618
Content-Type
Content
text/html; charset=utf-8

Server Headers

X-Powered-By
Next.js logo
Server
Next.js

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie
Cookies

Other Headers

Date
Other
Sat, 02 May 2026 15:45:54 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology