Open
Cached
·
just now
41
Headers
Detected Technologies from Headers
YouTube
Algolia
Amazon S3
Customer.io
Datadog
Facebook
Google Analytics
Google Conversion Tracking
Google DoubleClick
Google reCAPTCHA
Google Search
Google Static File Front End
Google Tag Manager
HubSpot
Active incidents
HubSpot Forms
Active incidents
Intercom
LinkedIn
Next.js
Sanity
Segment
Sentry
Typeform
Vercel
Vimeo
Wistia
Google Cloud
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=63072000; includeSubDomains; preload
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Strengthen CSP by removing 'unsafe-eval'
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Vary
rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
connection: close vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
Caching Headers
Age
2984
Cache-Control
public, s-maxage=3600, stale-while-revalidate=86400
Etag
"r5k8kz2fj89cnc"
age: 2984 cache-control: public, s-maxage=3600, stale-while-revalidate=86400 etag: "r5k8kz2fj89cnc"
Content Headers
Content-Length
436368
Content-Type
text/html; charset=utf-8
content-length: 436368 content-type: text/html; charset=utf-8
Server Headers
Server
Vercel
X-Powered-By
Next.js
server: Vercel x-powered-by: Next.js
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Accept
*/*
Date
Sat, 02 May 2026 09:04:35 GMT
Forwarded
for=204.93.227.86;host=www.urllo.com;proto=https
Reporting-Endpoints
browser-intake-datadoghq="https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba7ce83828fe5d17ad4afde450531f242&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Aer-www%2Cenv%3Aprod%2Cversion%3A52e72b8f5f34b4bc7ab2edd42bf2b20d3196c91f"
User-Agent
mint/1.7.1
X-Current-Path
/
X-Forwarded-For
204.93.227.86
X-Forwarded-Host
www.urllo.com
X-Forwarded-Proto
https
X-Invocation-Id
iad1::v954h-1777715660685-e57669ea2201
X-Matched-Path
/
X-Nextjs-Prerender
1
X-Nextjs-Stale-Time
300
X-Real-Ip
204.93.227.86
X-Vercel-Cache
HIT
X-Vercel-Id
iad1:iad1::iad1::v954h-1777715660685-e57669ea2201
X-Vercel-Ip-As-Number
30081
X-Vercel-Ip-City
Chicago
X-Vercel-Ip-Continent
NA
X-Vercel-Ip-Country
US
X-Vercel-Ip-Country-Region
IL
X-Vercel-Ip-Latitude
41.8483
X-Vercel-Ip-Longitude
-87.6517
X-Vercel-Ip-Postal-Code
60602
X-Vercel-Ip-Timezone
America/Chicago
X-Vercel-Ja4-Digest
t13d640700_70d83611e2fb_bc99fca5e491
X-Vercel-Proxied-For
204.93.227.86
accept: */* date: Sat, 02 May 2026 09:04:35 GMT forwarded: for=204.93.227.86;host=www.urllo.com;proto=https reporting-endpoints: browser-intake-datadoghq="https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba7ce83828fe5d17ad4afde450531f242&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Aer-www%2Cenv%3Aprod%2Cversion%3A52e72b8f5f34b4bc7ab2edd42bf2b20d3196c91f" user-agent: mint/1.7.1 x-current-path: / x-forwarded-for: 204.93.227.86 x-forwarded-host: www.urllo.com x-forwarded-proto: https x-invocation-id: iad1::v954h-1777715660685-e57669ea2201 x-matched-path: / x-nextjs-prerender: 1 x-nextjs-stale-time: 300 x-real-ip: 204.93.227.86 x-vercel-cache: HIT x-vercel-id: iad1:iad1::iad1::v954h-1777715660685-e57669ea2201 x-vercel-ip-as-number: 30081 x-vercel-ip-city: Chicago x-vercel-ip-continent: NA x-vercel-ip-country: US x-vercel-ip-country-region: IL x-vercel-ip-latitude: 41.8483 x-vercel-ip-longitude: -87.6517 x-vercel-ip-postal-code: 60602 x-vercel-ip-timezone: America/Chicago x-vercel-ja4-digest: t13d640700_70d83611e2fb_bc99fca5e491 x-vercel-proxied-for: 204.93.227.86
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology