Open
Cached
·
just now
42
Headers
Detected Technologies from Headers
YouTube
Algolia
Amazon S3
Customer.io
Datadog
Facebook
Google Analytics
Google DoubleClick
Google reCAPTCHA
Google Search
Google Static File Front End
Google Tag Manager
HubSpot
HubSpot Forms
Intercom
LinkedIn
Next.js
Sanity
Segment
Sentry
Typeform
Vercel
Vimeo
Wistia
Google Cloud
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=63072000; includeSubDomains; preload
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Strengthen CSP by removing 'unsafe-eval'
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Vary
rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
connection: close vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
Caching Headers
Age
2252
Cache-Control
public, s-maxage=3600, stale-while-revalidate=86400
Etag
"tj1q1gklah9amz"
age: 2252 cache-control: public, s-maxage=3600, stale-while-revalidate=86400 etag: "tj1q1gklah9amz"
Content Headers
Content-Length
433763
Content-Type
text/html; charset=utf-8
content-length: 433763 content-type: text/html; charset=utf-8
Server Headers
server: Vercel x-powered-by: Next.js
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Accept
*/*
Date
Fri, 08 May 2026 19:13:04 GMT
Forwarded
for=152.236.8.117;host=www.urllo.com;proto=https
Reporting-Endpoints
browser-intake-datadoghq="https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba7ce83828fe5d17ad4afde450531f242&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Aer-www%2Cenv%3Aprod%2Cversion%3A1db42f911c46ebcb446e403f96ac1e1caaa1cf5f"
User-Agent
mint/1.7.1
X-Current-Path
/
X-Forwarded-For
152.236.8.117
X-Forwarded-Host
www.urllo.com
X-Forwarded-Proto
https
X-Invocation-Id
iad1::9kfj9-1778316954960-0351807bfb2f
X-Matched-Path
/
X-Real-Ip
152.236.8.117
X-Vercel-Forwarded-For
152.236.8.117
X-Vercel-Invocation-Type
middleware
X-Vercel-Ip-As-Number
396356
X-Vercel-Ip-Continent
EU
X-Vercel-Ip-Country
IE
X-Vercel-Ip-Latitude
53.3472
X-Vercel-Ip-Longitude
-6.2439
X-Vercel-Ip-Timezone
Europe/Dublin
X-Vercel-Ja4-Digest
t13d640700_70d83611e2fb_bc99fca5e491
X-Vercel-Proxied-For
152.236.8.117
X-Vercel-Proxy-Signature
Bearer c537299e5dff80def5bcf76b74932b94970053596197878b41c5319b5f3e5191
X-Vercel-Proxy-Signature-Ts
1778317254
accept: */* date: Fri, 08 May 2026 19:13:04 GMT forwarded: for=152.236.8.117;host=www.urllo.com;proto=https reporting-endpoints: browser-intake-datadoghq="https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba7ce83828fe5d17ad4afde450531f242&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Aer-www%2Cenv%3Aprod%2Cversion%3A1db42f911c46ebcb446e403f96ac1e1caaa1cf5f" user-agent: mint/1.7.1 x-current-path: / x-forwarded-for: 152.236.8.117 x-forwarded-host: www.urllo.com x-forwarded-proto: https x-invocation-id: iad1::9kfj9-1778316954960-0351807bfb2f x-matched-path: / x-nextjs-prerender: 1 x-nextjs-stale-time: 300 x-real-ip: 152.236.8.117 x-vercel-cache: HIT x-vercel-forwarded-for: 152.236.8.117 x-vercel-id: iad1:iad1::iad1::9kfj9-1778316954960-0351807bfb2f x-vercel-invocation-type: middleware x-vercel-ip-as-number: 396356 x-vercel-ip-continent: EU x-vercel-ip-country: IE x-vercel-ip-latitude: 53.3472 x-vercel-ip-longitude: -6.2439 x-vercel-ip-timezone: Europe/Dublin x-vercel-ja4-digest: t13d640700_70d83611e2fb_bc99fca5e491 x-vercel-proxied-for: 152.236.8.117 x-vercel-proxy-signature: Bearer c537299e5dff80def5bcf76b74932b94970053596197878b41c5319b5f3e5191 x-vercel-proxy-signature-ts: 1778317254
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology