Open
Cached
·
just now
22
Headers
Detected Technologies from Headers
Algolia
AWS CloudFront
Amazon S3
Cloudflare CDNJS
Contentful
Esri
Facebook
Google AdSense
Google Analytics
Google DoubleClick
Google Fonts
Google Optimize
Google Search
Google Tag Manager
HubSpot
HubSpot Analytics
HubSpot CMS
HubSpot Feedback & Surveys
HubSpot Forms
HubSpot Live Chat
HubSpot Video
LinkedIn
Microsoft Clarity
Sketchfab
Twitter
Vimeo
YouTube
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer
Permissions-Policy
Missing
Not configured
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Accept-Ranges
bytes
Connection
close
Vary
Accept-Encoding
accept-ranges: bytes connection: close vary: Accept-Encoding
Caching Headers
Age
875
Cache-Control
public, max-age=0, must-revalidate
Etag
"1614fa05c83c4f68b898c1a1a8580d45"
Last-Modified
Wed, 06 May 2026 13:50:17 GMT
age: 875 cache-control: public, max-age=0, must-revalidate etag: "1614fa05c83c4f68b898c1a1a8580d45" last-modified: Wed, 06 May 2026 13:50:17 GMT
Content Headers
Content-Length
177468
Content-Type
text/html
content-length: 177468 content-type: text/html
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Thu, 07 May 2026 07:51:38 GMT
X-Permitted-Cross-Domain-Policies
none
date: Thu, 07 May 2026 07:51:38 GMT via: 1.1 3055c6bccfd52f4c0ae40793124cb388.cloudfront.net (CloudFront) x-amz-cf-id: WxJRXu63fjlL6u1Z0t32uZpzlQBvNXDFOwPPzda825epA3EQoIFeJQ== x-amz-cf-pop: IAD55-P6 x-amz-server-side-encryption: AES256 x-cache: Hit from cloudfront x-permitted-cross-domain-policies: none
Recommendations
Enable compression (gzip/brotli) to improve performance