Open
Cached
·
1h ago
19
Headers
Detected Technologies from Headers
AWS CloudFront
Google Tag Manager
Bing
Google reCAPTCHA
Fullstory
Reddit
HubSpot Forms
HubSpot Feedback & Surveys
Google DoubleClick
Google Analytics
Google Conversion Tracking
Segment
New Relic
Google Static File Front End
Google API JS Client
TikTok Analytics
Google Fonts
Clickagy
Wistia
Algolia
LinkedIn
Zendesk
Contentful
ZoomInfo
HubSpot Analytics
Google Search
Facebook
Pinterest
HubSpot
YouTube
The Trade Desk
Microsoft Clarity
Sentry
jsDelivr
Google Cloud
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
X-Frame-Options
Good
sameorigin
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Vary
Accept-Encoding
connection: close vary: Accept-Encoding
Caching Headers
Cache-Control
public,max-age=3609
cache-control: public,max-age=3609
Content Headers
Content-Length
406474
Content-Type
text/html; charset=utf-8
content-length: 406474 content-type: text/html; charset=utf-8
Server Headers
Server
CloudFront
X-Powered-By
MYOB
server: CloudFront x-powered-by: MYOB
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Alt-Svc
h3=":443"; ma=86400
Date
Sun, 12 Apr 2026 21:50:03 GMT
Via
1.1 61296aba80c2d50aaa865cf5dbceff6c.cloudfront.net (CloudFront)
X-Amz-Cf-Id
2Jxt8mc1084GcAKE0BRSJ5O64f7sl4luDrKMveyWNMYKJu_uZ75Gaw==
X-Amz-Cf-Pop
IAD61-P8
X-Cache
Miss from cloudfront
alt-svc: h3=":443"; ma=86400 date: Sun, 12 Apr 2026 21:50:03 GMT via: 1.1 61296aba80c2d50aaa865cf5dbceff6c.cloudfront.net (CloudFront) x-amz-cf-id: 2Jxt8mc1084GcAKE0BRSJ5O64f7sl4luDrKMveyWNMYKJu_uZ75Gaw== x-amz-cf-pop: IAD61-P8 x-cache: Miss from cloudfront
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology