Open
Cached
·
just now
21
Headers
Detected Technologies from Headers
AWS CloudFront
Amazon S3
BootstrapCDN
Facebook
Google Analytics
Google DoubleClick
Google Fonts
Google Hosted Libraries
Google Maps
Google Optimize
Google reCAPTCHA
Google Search
Google Static File Front End
Google Sign-In
Google Tag Manager
Hotjar
Intercom
ipify
Sentry
Trustpilot
Webflow
Google Cloud
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer-when-downgrade
Permissions-Policy
Missing
Not configured
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Accept-Ranges
bytes
Connection
close
accept-ranges: bytes connection: close
Caching Headers
Age
65387
Cache-Control
public, max-age=0, s-maxage=31536000
Etag
"971089cd08896a29bfc43b6cd6df0bdd"
Last-Modified
Thu, 14 May 2026 06:51:11 GMT
age: 65387 cache-control: public, max-age=0, s-maxage=31536000 etag: "971089cd08896a29bfc43b6cd6df0bdd" last-modified: Thu, 14 May 2026 06:51:11 GMT
Content Headers
Content-Length
7407
Content-Type
text/html
content-length: 7407 content-type: text/html
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Alt-Svc
h3=":443"; ma=86400
Date
Thu, 14 May 2026 07:09:31 GMT
alt-svc: h3=":443"; ma=86400 date: Thu, 14 May 2026 07:09:31 GMT via: 1.1 ddf6879aa6c2007b075baebb295e9494.cloudfront.net (CloudFront) x-amz-cf-id: lkpOMRSIISRFrxR07Ou061yh8BbycGPU6ldXDw5feeN48hB1EgBeBQ== x-amz-cf-pop: IAD55-P5 x-cache: Hit from cloudfront
Recommendations
Enable compression (gzip/brotli) to improve performance