Open
Cached
·
just now
18
Headers
Detected Technologies from Headers
AWS CloudFront
PayPal
Amplitude
Auth0
AWS
Amazon S3
Microsoft Advertising
Braintree
Datadog
Facebook
Font Awesome
Forter
Google Analytics
Google API JS Client
Google DoubleClick
Google Fonts
Google Static File Front End
Google Tag Manager
LaunchDarkly
Loggly
Pinterest
Qualtrics
Reddit
Salesforce Cloud
Salesforce Sites
Snapchat
Stripe
Tealium
TikTok Analytics
Google Cloud
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Accept-Ranges
bytes
Connection
close
accept-ranges: bytes connection: close
Caching Headers
Etag
"320c09d9704076201df3d6abfcb1f913"
Last-Modified
Wed, 01 Apr 2026 00:23:39 GMT
etag: "320c09d9704076201df3d6abfcb1f913" last-modified: Wed, 01 Apr 2026 00:23:39 GMT
Content Headers
Content-Length
1708
Content-Type
text/html
content-length: 1708 content-type: text/html
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Thu, 02 Apr 2026 22:35:27 GMT
X-Amz-Server-Side-Encryption-Aws-Kms-Key-Id
arn:aws:kms:us-east-1:554417847584:key/774c8bdb-580f-42a2-91e2-15a3432135b6
X-Amz-Server-Side-Encryption-Bucket-Key-Enabled
true
date: Thu, 02 Apr 2026 22:35:27 GMT via: 1.1 8d260504510dc66e11b489b69c10cb8e.cloudfront.net (CloudFront) x-amz-cf-id: zxY7iomv-vU3nsUsvHmIwOW3l_3mSDDQsHiUe6PxPqRHZu3eIjRp3w== x-amz-cf-pop: IAD55-P6 x-amz-server-side-encryption: aws:kms x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:us-east-1:554417847584:key/774c8bdb-580f-42a2-91e2-15a3432135b6 x-amz-server-side-encryption-bucket-key-enabled: true x-amz-version-id: xbPzCrr0Of3lOROxXZ1g6LAWyiTfjK5H x-cache: RefreshHit from cloudfront
Recommendations
Enable compression (gzip/brotli) to improve performance
Add Cache-Control header to optimize caching