Cached · just now
26 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=63072000; includeSubDomains; preload
Content-Security-Policy
Basic
child-src; default-src; font-src; +9 more
X-Frame-Options
Excellent
deny
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
origin
Permissions-Policy
Missing
Not configured
Recommendations
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Consider adding Permissions-Policy to control browser features

Performance Headers

1 headers
Connection
Performance
close

Caching Headers

3 headers
Age
Caching
299713
Cache-Control
Caching
s-maxage=31536000, stale-while-revalidate=2592000
Etag
Caching
"se8k2u6rtt9u77"

Content Headers

2 headers
Content-Length
Content
459342
Content-Type
Content
text/html; charset=utf-8

Server Headers

1 headers
X-Powered-By
Server
Next.js

CORS Headers

0 headers
No CORS headers found

Cookies Headers

0 headers
No cookies headers found

Other Headers

13 headers
Date
Other
Thu, 08 Jan 2026 16:52:46 GMT
Nel
Other
{"report_to":"default","max_age":604800,"include_subdomains":true,"success_fraction":0.05}
Report-To
Other
{"group":"default","max_age":604800,"endpoints":[{"url":"https://redsift.reporting.hardenize.com"}],"include_subdomains":true}
Via
Other
1.1 e6b4dbead926e5325f87837a8678a68a.cloudfront.net (CloudFront)
X-Amz-Cf-Id
Other
0s_-3Ri6FO72SOy2Da7oL222XB7dQOf9yJoF1hS_3wp4aMjlOw2Y0Q==
X-Amz-Cf-Pop
Other
JFK52-P2
X-Amzn-Remapped-Content-Length
Other
459342
X-Amzn-Requestid
Other
43c213ff-64bd-4085-989e-250d07395b08
X-Amzn-Trace-Id
Other
Root=1-695fe0dd-7bc41cf4647b72196d6a821a;Parent=1e1578cae18b0484;Sampled=0;Lineage=1:add19190:0
X-Cache
Other
Hit from cloudfront
X-Download-Options
Other
noopen
X-Nextjs-Cache
Other
HIT
X-Opennext
Other
1

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology