Open
Cached
·
just now
18
Headers
Detected Technologies from Headers
Amplitude
AWS CloudFront
Cloudinary
Cookiebot
Facebook
Google AdSense
Google Analytics
Google API JS Client
Google DoubleClick
Google Fonts
Google Search
Google Static File Front End
Google Tag Manager
Hotjar
jsDelivr
LinkedIn
Nginx
OptinMonster
Prismic
Typeform
unpkg
YouTube
Google Cloud
Next.js
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=15552000
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Vary
Accept-Encoding
connection: close vary: Accept-Encoding
Caching Headers
Cache-Control
s-maxage=31536000, stale-while-revalidate
Etag
"n2fdoju4sh566i"
cache-control: s-maxage=31536000, stale-while-revalidate etag: "n2fdoju4sh566i"
Content Headers
Content-Length
241790
Content-Type
text/html; charset=utf-8
content-length: 241790 content-type: text/html; charset=utf-8
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Wed, 29 Apr 2026 06:52:03 GMT
X-Lang
en-us
X-Middleware-Rewrite
/en-us/
date: Wed, 29 Apr 2026 06:52:03 GMT via: 1.1 d524fd53067e060a838db45329abc4c0.cloudfront.net (CloudFront) x-amz-cf-id: 4eUqeQz6p6QLpnmorQUskeA9uAzAdOhI2gU3qkQFjNK9LC9bovx2PA== x-amz-cf-pop: IAD55-P1 x-cache: Miss from cloudfront x-lang: en-us x-middleware-rewrite: /en-us/ x-nextjs-cache: HIT
Recommendations
Enable compression (gzip/brotli) to improve performance