Open
Cached
·
just now
28
Headers
Detected Technologies from Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=7776000; includeSubDomains; preload
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
camera=(), microphone=(), geolocation=(); +3 more
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
Performance Headers
Connection
close
Transfer-Encoding
chunked
Vary
rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, accept-encoding
connection: close transfer-encoding: chunked vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, accept-encoding
Caching Headers
Age
3086
Cache-Control
public, max-age=0, must-revalidate
age: 3086 cache-control: public, max-age=0, must-revalidate
Content Headers
Content-Type
text/html; charset=utf-8
content-type: text/html; charset=utf-8
Server Headers
server: cloudflare x-powered-by: Next.js
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Alt-Svc
h3=":443"; ma=86400
Content-Signal
ai-train=yes, search=yes, ai-input=yes
Date
Wed, 07 Oct 2026 18:42:10 GMT
Link
URL
/sitemap.xml
rel=sitemap
URL
/llms.txt
rel=describedby
type=text/plain
URL
/developers.md
rel=alternate
type=text/markdown
URL
/prompt.md
rel=alternate
type=text/markdown
URL
/sitemap.xml
rel=sitemap
URL
/llms.txt
rel=describedby
type=text/plain
URL
/developers.md
rel=alternate
type=text/markdown
URL
/prompt.md
rel=alternate
type=text/markdown
URL
/openapi.json
rel=service-desc
type=application/vnd.oai.openapi+json
URL
/.well-known/mcp-server-card/com.manufact/cloud
rel=service-desc
type=application/json
URL
/.well-known/agent-skills/index.json
rel=agent-skills
URL
/index.md
rel=alternate
type=text/markdown
Nel
Report-To Group
cf-nel
max-age: 1w
success: 0.0%
Report-To
Other
Server-Timing
cfCacheStatus;desc="DYNAMIC", cfEdge;dur=12,cfOrigin;dur=47
X-Matched-Path
/
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
cf-ray: a46f0b4fab85a6b1-ATL
content-signal: ai-train=yes, search=yes, ai-input=yes
date: Wed, 07 Oct 2026 18:42:10 GMT
link: </sitemap.xml>; rel="sitemap", </llms.txt>; rel="describedby"; type="text/plain", </developers.md>; rel="alternate"; type="text/markdown", </prompt.md>; rel="alternate"; type="text/markdown", </openapi.json>; rel="service-desc"; type="application/vnd.oai.openapi+json", </.well-known/mcp-server-card/com.manufact/cloud>; rel="service-desc"; type="application/json", </.well-known/agent-skills/index.json>; rel="agent-skills", </index.md>; rel="alternate"; type="text/markdown"
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=h5L7UNnLWt%2FmCaiJ3NEXHlZPxOtVCxskX1hsJQs0wIsuOmrR23vEbiWkH7PIArQixiUOm1U%2BgC8bXqu%2Btx1HhTU9e%2FazCMugvekeMM%2BT5Y6ckSg14Ory8KnUJD5Ng%2BM%3D"}]}
server-timing: cfCacheStatus;desc="DYNAMIC", cfEdge;dur=12,cfOrigin;dur=47
x-matched-path: /
x-nextjs-prerender: 1
x-nextjs-stale-time: 300
x-vercel-cache: HIT
x-vercel-id: iad1::iad1::sq8pn-1791398530524-b8e40221128e
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology