HTTP Headers Analysis for https://itelinc.com

Detected Technologies from Headers

See all in URL Inspect 6

YouTube

AWS

AWS CloudFront

Esri

Next.js

Varnish

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Basic

default-src; img-src; script-src; +2 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Vary

Performance

RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding,Origin

accept-ranges: bytes
connection: close
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding,Origin

Caching Headers

Age

Caching

0

Cache-Control

Caching

public, max-age=60, stale-while-revalidate=60

age: 0
cache-control: public, max-age=60, stale-while-revalidate=60

Content Headers

Content-Length

Content

326717

Content-Type

Content

text/html; charset=utf-8

content-length: 326717
content-type: text/html; charset=utf-8

Server Headers

X-Powered-By

Server

Next.js

x-powered-by: Next.js

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Sun, 03 May 2026 04:24:25 GMT

Link

Other

URL https://cf.nmws.nearmap.com/static/_next/static/media/baf189c215c76387-s.p.woff2

rel=preload as=font crossorigin type=font/woff2

URL https://cf.nmws.nearmap.com/static/_next/static/media/bd5cb8d9c6fd6413-s.p.woff2

rel=preload as=font crossorigin type=font/woff2

URL https://cf.nmws.nearmap.com/static/_next/static/media/f7e28de6d6bf52b7-s.p.woff2

rel=preload as=font crossorigin type=font/woff2

Via

Other

1.1 a3134c0c893f03d1e9a9c657d09af7cc.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish

X-Amz-Cf-Id

Other

cB3nk7EhhdZDIyGYJu17DwmCCKBqiBGfzJXOwrHSuuYU5vHoQImTHQ==

X-Amz-Cf-Pop

Other

SEA900-P9

X-Amzn-Remapped-Connection

Other

keep-alive

X-Amzn-Remapped-Date

Other

Sun, 03 May 2026 04:24:24 GMT

X-Amzn-Requestid

Other

1472c1b6-e9bd-4f0e-868c-872c64ae9ac9

X-Amzn-Trace-Id

Other

Root=1-69f6cdf8-58ede5f91c9b76d91e56d41e;Parent=18f436e56ad7ff2b;Sampled=0;Lineage=1:ca9b16fd:0

X-Cache

Other

Miss from cloudfront, MISS, MISS

X-Cache-Hits

Other

0, 0

X-Correlation-Id

Other

31df3e08-c63d-451c-a67b-cb702474c04e

X-Served-By

Other

cache-bfi-kbfi7400083-BFI, cache-iad-kiad7000096-IAD

X-Timer

Other

S1777782264.437060,VS0,VE629

date: Sun, 03 May 2026 04:24:25 GMT
link: <https://cf.nmws.nearmap.com/static/_next/static/media/baf189c215c76387-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", <https://cf.nmws.nearmap.com/static/_next/static/media/bd5cb8d9c6fd6413-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", <https://cf.nmws.nearmap.com/static/_next/static/media/f7e28de6d6bf52b7-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
via: 1.1 a3134c0c893f03d1e9a9c657d09af7cc.cloudfront.net (CloudFront), 1.1 varnish, 1.1 varnish
x-amz-cf-id: cB3nk7EhhdZDIyGYJu17DwmCCKBqiBGfzJXOwrHSuuYU5vHoQImTHQ==
x-amz-cf-pop: SEA900-P9
x-amzn-remapped-connection: keep-alive
x-amzn-remapped-date: Sun, 03 May 2026 04:24:24 GMT
x-amzn-requestid: 1472c1b6-e9bd-4f0e-868c-872c64ae9ac9
x-amzn-trace-id: Root=1-69f6cdf8-58ede5f91c9b76d91e56d41e;Parent=18f436e56ad7ff2b;Sampled=0;Lineage=1:ca9b16fd:0
x-cache: Miss from cloudfront, MISS, MISS
x-cache-hits: 0, 0
x-correlation-id: 31df3e08-c63d-451c-a67b-cb702474c04e
x-served-by: cache-bfi-kbfi7400083-BFI, cache-iad-kiad7000096-IAD
x-timer: S1777782264.437060,VS0,VE629

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology