HTTP Headers Analysis for https://preview.aemvite.dev

Detected Technologies from Headers

See all in URL Inspect 18

GitHub

YouTube

AMP

Calendly

ClearBit

CodeSandbox

Contentful

Ethyca

Google API JS Client

Google Search

Google Static File Front End

Google Sign-In

Next.js

Pusher

Stripe

Twitter

Vercel

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Basic

default-src; script-src; child-src; +7 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch

accept-ranges: bytes
connection: close
transfer-encoding: chunked
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch

Caching Headers

Age

Caching

33

Cache-Control

Caching

public, max-age=0, must-revalidate

age: 33
cache-control: public, max-age=0, must-revalidate

Content Headers

Content-Disposition

Content

inline

Content-Type

Content

text/html; charset=utf-8

content-disposition: inline
content-type: text/html; charset=utf-8

Server Headers

Server

Vercel

server: Vercel

CORS Headers

Access-Control-Allow-Origin

Cors

*

access-control-allow-origin: *

Cookies Headers

Set-Cookie

Cookies

set-cookie: visitor-id=gyLMESzrt_Hn733WTxxur; Path=/; Max-Age=86400
_v-anonymous-id=qIRQTrGoPfEgqlo27z29B; Path=/; Max-Age=7776000; SameSite=Lax; Secure; Domain=.vercel.com
_v-anonymous-id-renewed=1; Path=/; Max-Age=86400; SameSite=Lax; Secure; Domain=.vercel.com
_v-consent=%7B%22essential%22%3Atrue%2C%22analytics%22%3Atrue%2C%22marketing%22%3Atrue%2C%22functional%22%3Atrue%2C%22version%22%3A1%7D; Path=/; Max-Age=31536000; SameSite=Lax; Secure; Domain=.vercel.com

Other Headers

Date

Other

Tue, 28 Jul 2026 20:22:04 GMT

Feature-Policy

Other

fullscreen 'self'; camera 'none'

Link

Other

URL

https://avatars.githubusercontent.com

rel=preconnect crossorigin

URL

https://py8fhxnkzwtsqdo9.public.blob.vercel-storage.com

rel=preconnect crossorigin

URL

https://images.ctfassets.net

rel=preconnect crossorigin

URL

https://accounts.google.com

rel=preconnect crossorigin

X-Dns-Prefetch-Control

Other

on

X-Download-Options

Other

noopen

X-Matched-Path

Other

/login

X-Nextjs-Prerender

Other

1

X-Nextjs-Stale-Time

Other

300

X-Vercel-Cache

Other

HIT

X-Vercel-Id

Other

iad1::pmpwl-1785270124835-3ff7cdcd25a9

date: Tue, 28 Jul 2026 20:22:04 GMT
feature-policy: fullscreen 'self'; camera 'none'
link: <https://avatars.githubusercontent.com>; rel=preconnect; crossorigin="", <https://py8fhxnkzwtsqdo9.public.blob.vercel-storage.com>; rel=preconnect; crossorigin="", <https://images.ctfassets.net>; rel=preconnect; crossorigin="", <https://accounts.google.com>; rel=preconnect; crossorigin="", </_next/static/immutable/media/797e433ab948586e.p.1v5bejj26fx9h.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/immutable/media/Geist_Variable-s.p.2v-cf9syxr5ni.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2"
x-dns-prefetch-control: on
x-download-options: noopen
x-matched-path: /login
x-nextjs-prerender: 1
x-nextjs-stale-time: 300
x-vercel-cache: HIT
x-vercel-id: iad1::pmpwl-1785270124835-3ff7cdcd25a9

Recommendations

Enable compression (gzip/brotli) to improve performance