Open
          
        
        
        
          
            
            Cached
            ·
            just now
          
        
      
    
        
          
        
        
          20
        
        
          Headers
        
      
    
  HTTP Security Headers
Status
      Strict-Transport-Security
    
    
    
      
        Excellent
      
    
    
    
      
        
          max-age=31536000; includeSubDomains; preload
        
      
    
    
    
      Content-Security-Policy
    
    
    
      
        Missing
      
    
    
    
      
        Not configured
      
    
    
    
      X-Frame-Options
    
    
    
      
        Missing
      
    
    
    
      
        Not configured
      
    
    
    
      X-Content-Type-Options
    
    
    
      
        Good
      
    
    
    
      
        
          nosniff
        
      
    
    
    
      Referrer-Policy
    
    
    
      
        Missing
      
    
    
    
      
        Not configured
      
    
    
    
      Permissions-Policy
    
    
    
      
        Missing
      
    
    
    
      
        Not configured
      
    
    
    
            
            Recommendations
          
          - • Add Content-Security-Policy header to prevent XSS attacks
 - • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
 - • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
 - • Consider adding Permissions-Policy to control browser features
 
Performance Headers
3 headers
      Connection
    
    
    
      Performance
    
    
    
      keep-alive
    
    
    
      Transfer-Encoding
    
    
    
      Performance
    
    
    
      chunked
    
    
    
      Vary
    
    
    
      Performance
    
    
    
      accept-encoding
    
    
    Caching Headers
2 headers
      Age
    
    
    
      Caching
    
    
    
      44827
    
    
    
      Cache-Control
    
    
    
      Caching
    
    
    
      public, max-age=0, must-revalidate
    
    
    Content Headers
1 headers
      Content-Type
    
    
    
      Content
    
    
    
      text/html; charset=utf-8
    
    
    Server Headers
2 headers
      Server
    
    
    
      Server
    
    
    
      cloudflare
    
    
    
      X-Powered-By
    
    
    
      Server
    
    
    
      Next.js
    
    
    CORS Headers
0 headers
        No CORS headers found
      
    
  Cookies Headers
1 headers
      Set-Cookie
    
    
    
      Cookies
    
    
    
      _cfuvid=XhNGukUwKx_D6_4Mj3DTFZFe7y24mXU6pz0XxTOHm9A-1762256125297-0.0.1.1-604800000; path=/; domain=.openai.com; HttpOnly; Secure; SameSite=None
    
    
    Other Headers
9 headers
      Alt-Svc
    
    
    
      Other
    
    
    
      h3=":443"; ma=86400
    
    
    
      Cf-Cache-Status
    
    
    
      Other
    
    
    
      DYNAMIC
    
    
    
      Cf-Ray
    
    
    
      Other
    
    
    
      9993cecebbf9c9b8-IAD
    
    
    
      Date
    
    
    
      Other
    
    
    
      Tue, 04 Nov 2025 11:35:25 GMT
    
    
    
      Nel
    
    
    
      Other
    
    
    
      {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
    
    
    
      Report-To
    
    
    
      Other
    
    
    
      {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UXCIss8CQSY9xXOvEHX9B4kxjSum2zPgPTn36ZlQqdXvMY0PtnpLn5wZfTm02WaFCceIFZB%2F2uuPe%2FiBejiYojvjzq0UiGFciDtmIIHvOr%2BmkWTBJqSY1215zHM%3D"}],"group":"cf-nel","max_age":604800}
    
    
    
      X-Matched-Path
    
    
    
      Other
    
    
    
      /[locale]/[country]/[flags]
    
    
    
      X-Vercel-Cache
    
    
    
      Other
    
    
    
      HIT
    
    
    
      X-Vercel-Id
    
    
    
      Other
    
    
    
      iad1::pdx1::kbnrc-1762256125265-d640b92f7287
    
    
    Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology
Analysis completed in 79ms