Cached · just now
29 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
Content-Security-Policy
Basic
base-uri; default-src; script-src; +8 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

Performance Headers

Connection
Performance
close
Transfer-Encoding
Performance
chunked
Vary
Performance
RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding

Caching Headers

Cache-Control
Caching
s-maxage=120, stale-while-revalidate

Content Headers

Content-Type
Content
text/html; charset=utf-8

Server Headers

Server
Server
cloudflare
X-Powered-By
Server
Next.js

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie
Cookies

Other Headers

Cdn-Loop
Other
cloudflare; loops=1
Cf-Cache-Status
Other
DYNAMIC
Cf-Connecting-Ip
Other
152.233.42.49
Cf-Ipcountry
Other
US
Cf-Ray
Other
9f631874bbe0d610-IAD
Cf-Visitor
Other
{"scheme":"https"}
Date
Other
Sun, 03 May 2026 23:37:47 GMT
Host
Other
nordlayer.com
User-Agent
Other
mint/1.7.1
X-Amzn-Trace-Id
Other
Root=1-69f7dc4b-778cf43f1eaa49a93c4abe8f
X-Forwarded-For
Other
152.233.42.49, 104.23.213.101, 152.233.42.49
X-Forwarded-Host
Other
nordlayer.com
X-Forwarded-Port
Other
443
X-Middleware-Rewrite
Other
/home-1/
X-Nextjs-Cache
Other
HIT
X-Nginx-Proxy
Other
true

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology