HTTP Headers Analysis for https://manus.space

Open Cached · just now

23 Headers

Detected Technologies from Headers

See all in URL Inspect 4

AWS

AWS CloudFront

Cloudflare CDN

Next.js

HTTP Security Headers

Status

Strict-Transport-Security

Weak

max-age=0; includeSubDomains; preload

Content-Security-Policy

Basic

script-src Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

Vary

Performance

rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding

connection: close
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding

Caching Headers

Cache-Control

Caching

private, no-cache, no-store, max-age=0, must-revalidate

cache-control: private, no-cache, no-store, max-age=0, must-revalidate

Content Headers

Content-Length

Content

123583

Content-Type

Content

text/html; charset=utf-8

content-length: 123583
content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

X-Powered-By

Server

Next.js

server: cloudflare
x-powered-by: Next.js

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Accept-Ch

Other

Sec-CH-Prefers-Color-Scheme

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

9f77e90c7f99e5c1-IAD

Date

Other

Wed, 06 May 2026 12:15:27 GMT

Link

Other

URL https://files.manuscdn.com/webapp/_next/static/media/3b891b14d3cf1415-s.p.woff2

rel=preload as=font crossorigin nonce=ZTk0NTM0NWYtMDhkZi00ZDgzLTkyZmEtMDZiNjEyZTRkMjY0 type=font/woff2

URL https://files.manuscdn.com/webapp/_next/static/media/5963f2babe8689ab-s.p.woff2

rel=preload as=font crossorigin nonce=ZTk0NTM0NWYtMDhkZi00ZDgzLTkyZmEtMDZiNjEyZTRkMjY0 type=font/woff2

URL https://files.manuscdn.com/webapp/_next/static/media/b20daecae68a588f-s.p.woff2

rel=preload as=font crossorigin nonce=ZTk0NTM0NWYtMDhkZi00ZDgzLTkyZmEtMDZiNjEyZTRkMjY0 type=font/woff2

URL https://files.manuscdn.com/webapp/_next/static/media/782fd72d8ca20ddd-s.p.woff2

rel=preload as=font crossorigin nonce=ZTk0NTM0NWYtMDhkZi00ZDgzLTkyZmEtMDZiNjEyZTRkMjY0 type=font/woff2

Via

Other

1.1 45473a4db716c4d57cb154b15de67f7e.cloudfront.net (CloudFront)

X-Amz-Cf-Id

Other

d3iHNL2PRlhJfqGY28doCxmRti-eXoiWA9RieauD1VUsab6cV4XmfQ==

X-Amz-Cf-Pop

Other

IAD61-P7

X-Amzn-Remapped-Connection

Other

keep-alive

X-Amzn-Remapped-Date

Other

Wed, 06 May 2026 12:15:27 GMT

X-Amzn-Requestid

Other

ac1cd5ca-bbc1-441b-bec1-af1d718d1bfc

X-Amzn-Trace-Id

Other

Root=1-69fb30df-32026aa97df881f82bb5b464;Parent=645a340234c7c171;Sampled=0;Lineage=1:46402ca0:0

X-Cache

Other

Miss from cloudfront

accept-ch: Sec-CH-Prefers-Color-Scheme
cf-cache-status: DYNAMIC
cf-ray: 9f77e90c7f99e5c1-IAD
date: Wed, 06 May 2026 12:15:27 GMT
link: <https://files.manuscdn.com/webapp/_next/static/media/3b891b14d3cf1415-s.p.woff2>; rel=preload; as="font"; crossorigin=""; nonce="ZTk0NTM0NWYtMDhkZi00ZDgzLTkyZmEtMDZiNjEyZTRkMjY0"; type="font/woff2", <https://files.manuscdn.com/webapp/_next/static/media/5963f2babe8689ab-s.p.woff2>; rel=preload; as="font"; crossorigin=""; nonce="ZTk0NTM0NWYtMDhkZi00ZDgzLTkyZmEtMDZiNjEyZTRkMjY0"; type="font/woff2", <https://files.manuscdn.com/webapp/_next/static/media/b20daecae68a588f-s.p.woff2>; rel=preload; as="font"; crossorigin=""; nonce="ZTk0NTM0NWYtMDhkZi00ZDgzLTkyZmEtMDZiNjEyZTRkMjY0"; type="font/woff2", <https://files.manuscdn.com/webapp/_next/static/media/782fd72d8ca20ddd-s.p.woff2>; rel=preload; as="font"; crossorigin=""; nonce="ZTk0NTM0NWYtMDhkZi00ZDgzLTkyZmEtMDZiNjEyZTRkMjY0"; type="font/woff2", <https://files.manuscdn.com/webapp/_next/static/media/cccb76cee38030ea-s.p.woff2>; rel=preload; as="font"; crossorigin=""; nonce="ZTk0NTM0NWYtMDhkZi00ZDgzLTkyZmEtMDZiNjEyZTRkMjY0"; type="font/woff2", <https://files.manuscdn.com/webapp/_next/static/media/web-app.31ba901d.webp>; rel=preload; as="image"
via: 1.1 45473a4db716c4d57cb154b15de67f7e.cloudfront.net (CloudFront)
x-amz-cf-id: d3iHNL2PRlhJfqGY28doCxmRti-eXoiWA9RieauD1VUsab6cV4XmfQ==
x-amz-cf-pop: IAD61-P7
x-amzn-remapped-connection: keep-alive
x-amzn-remapped-date: Wed, 06 May 2026 12:15:27 GMT
x-amzn-requestid: ac1cd5ca-bbc1-441b-bec1-af1d718d1bfc
x-amzn-trace-id: Root=1-69fb30df-32026aa97df881f82bb5b464;Parent=645a340234c7c171;Sampled=0;Lineage=1:46402ca0:0
x-cache: Miss from cloudfront

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology