Open
Cached
·
just now
28
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=15552000; includeSubDomains;
Content-Security-Policy
Basic
base-uri; font-src; form-action; +10 more
base-uri 'none'; font-src 'self' data: https://fonts.gstatic.com; form-action https://forms-eu1.hsforms.com; frame-ancestors 'self'; img-src 'self' data: blob: data: vercel.com https://imgsct.cookiebot.com https: https://forms-eu1.hsforms.com; object-src 'none'; script-src-attr 'unsafe-inline'; style-src 'self' vercel.live 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'unsafe-hashes' https://vercel.live https://apis.google.com https://www.google.com/recaptcha/api.js https://analytics.madebyburo.com https://www.gstatic.com https://www.googletagmanager.com https://consent.cookiebot.com https://consentcdn.cookiebot.com *.withburo.com stats.withburo.com https://cdn.amplitude.com https://static.hotjar.com https://js-eu1.hsforms.net/forms/embed/v2.js https://plausible.io https://script.hotjar.com 'sha256-f8ltqFODI0395MnhAchJVbXWODvM6sGKuTme9IbJNW8=' 'sha256-bC55zkRuqQEBnryJgTZy0o20L2Sez0YTO2VU8jnBojM=' 'sha384-6JhLeIooaYUGkYCNgF3mULvNTXOR5cPocFbuVmcwuTWnYhbXoQb0un70Iqqjnpuv' 'sha384-RH2xicr1SKGV+hTcRIjtTIFyG9U2mVZ2y8XB9WaNwDEBnnpx42s+nk2+KR7zd3wA' 'sha384-l5GlWLwM74QcONXkSoMGTFzJCUhpg3MKymIRpUv6WPmb5OOWfbuKXDVEUjovXWgo' 'sha384-8oxzk5L33ZrBcqhxfHZGTYRp2mO11aSQxh9GPUoxH5M6BdCEZ9o7MXSF3V7WpjmQ' 'sha384-veo41uMOVkeF+FP6tuCedZm/HVSGTFZSUuWPu2yzi3Xs6WYbqZXGSE3fLrhsCF1m' 'sha384-J2XfDUuAQv4pIeg8d4/F33uTbdQeMJgfW5xJ/xPS0LC13NNIfACveksTehMnEoU/'; upgrade-insecure-requests; connect-src 'self' vercel.live https://cdn.sanity.io *.apicdn.sanity.io https://cdn.jsdelivr.net https://analytics.madebyburo.com https://unpkg.com *.pusher.com wss://ws-us3.pusher.com consentcdn.cookiebot.com stats.g.doubleclick.net analytics.google.com *.google-analytics.com *.withburo.com stats.withburo.com https://www.google.com https://plausible.io https://js-eu1.hsforms.net https://hubspot-forms-static-embed-eu1.s3.amazonaws.com https://forms-eu1.hsforms.com https://sr-client-cfg.eu.amplitude.com https://api.eu.amplitude.com https://cdn.amplitude.com https://content.hotjar.io wss://ws.hotjar.com *.hotjar.com https://vc.hotjar.io; media-src 'self'; worker-src * blob:;;
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin
Permissions-Policy
Present
camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
Performance Headers
1 headers
Accept-Ranges
Performance
bytes
Caching Headers
4 headers
Age
Caching
1185750
Cache-Control
Caching
public, max-age=0, must-revalidate
Etag
Caching
"0f3de13803b6a98460225acb580a323c"
Last-Modified
Caching
Tue, 11 Nov 2025 09:27:01 GMT
Content Headers
3 headers
Content-Disposition
Content
inline
Content-Length
Content
303081
Content-Type
Content
text/html;charset=utf-8
Server Headers
1 headers
Server
Server
Vercel
CORS Headers
1 headers
Access-Control-Allow-Origin
Cors
*
Cookies Headers
0 headers
No cookies headers found
Other Headers
8 headers
Date
Other
Tue, 25 Nov 2025 02:49:31 GMT
Origin-Agent-Cluster
Other
?1
X-Dns-Prefetch-Control
Other
off
X-Download-Options
Other
noopen
X-Permitted-Cross-Domain-Policies
Other
none
X-Robots-Tag
Other
index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1
X-Vercel-Cache
Other
HIT
X-Vercel-Id
Other
iad1::nsdbr-1764038971471-d5c037789f39
Recommendations
Enable compression (gzip/brotli) to improve performance
Analysis completed in 145ms