Open
Cached
·
just now
11
Headers
Detected Technologies from Headers
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Transfer-Encoding
chunked
Vary
rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding
connection: close transfer-encoding: chunked vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding
Caching Headers
Cache-Control
private, no-cache, no-store, max-age=0, must-revalidate
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
Content Headers
Content-Type
text/html; charset=utf-8
content-type: text/html; charset=utf-8
Server Headers
X-Powered-By
Next.js, Payload
x-powered-by: Next.js, Payload
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Accept-Ch
Sec-CH-Prefers-Color-Scheme
Alt-Svc
h3=":443"; ma=2592000
Critical-Ch
Sec-CH-Prefers-Color-Scheme
Date
Mon, 31 Aug 2026 18:13:05 GMT
Link
URL
/_next/static/media/4b825e536f0add60-s.p.0diytsp97~my7.woff2
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/a88409fdd7dc121c-s.p.0ir_pxtv760h..woff2
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/c825fd02acae0153-s.p.0js52-zd~6bs8.woff2
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/ce62453a442c7f35-s.p.0333ktddfbsxy.woff2
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/4b825e536f0add60-s.p.0diytsp97~my7.woff2
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/a88409fdd7dc121c-s.p.0ir_pxtv760h..woff2
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/c825fd02acae0153-s.p.0js52-zd~6bs8.woff2
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/ce62453a442c7f35-s.p.0333ktddfbsxy.woff2
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/e8f2fbee2754df70-s.p.0fzkl03jw-sdz.woff2
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/f7d6090e8b3debad-s.p.00qosz~21_9iq.woff2
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/chunks/0l_e0~o4mkt3s.css
/_next/static/chunks/0l_e0~o4mkt3s.css
rel=preload
as=style
URL
/_next/static/chunks/0fimqxi3xge3s.css
/_next/static/chunks/0fimqxi3xge3s.css
rel=preload
as=style
accept-ch: Sec-CH-Prefers-Color-Scheme alt-svc: h3=":443"; ma=2592000 critical-ch: Sec-CH-Prefers-Color-Scheme date: Mon, 31 Aug 2026 18:13:05 GMT link: </_next/static/media/4b825e536f0add60-s.p.0diytsp97~my7.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/a88409fdd7dc121c-s.p.0ir_pxtv760h..woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/c825fd02acae0153-s.p.0js52-zd~6bs8.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/ce62453a442c7f35-s.p.0333ktddfbsxy.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/e8f2fbee2754df70-s.p.0fzkl03jw-sdz.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/f7d6090e8b3debad-s.p.00qosz~21_9iq.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/chunks/0l_e0~o4mkt3s.css>; rel=preload; as="style", </_next/static/chunks/0fimqxi3xge3s.css>; rel=preload; as="style"
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology