Open
Cached
·
just now
29
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
Content-Security-Policy
Weak
upgrade-insecure-requests; frame-ancestors; report-uri
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Significantly strengthen CSP directives
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Consider adding Permissions-Policy to control browser features
Performance Headers
3 headers
Connection
Performance
keep-alive
Transfer-Encoding
Performance
chunked
Vary
Performance
rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, accept-encoding
Caching Headers
2 headers
Age
Caching
0
Cache-Control
Caching
private, no-cache, no-store, max-age=0, must-revalidate
Content Headers
1 headers
Content-Type
Content
text/html; charset=utf-8
Server Headers
2 headers
Server
Server
cloudflare
X-Powered-By
Server
Next.js
CORS Headers
0 headers
No CORS headers found
Cookies Headers
1 headers
Set-Cookie
Cookies
__cf_bm=par4Zq9VuXpE9w10ipqO96s7Q3k4M.fC6tWC9X1Mhsc-1762135269-1.0.1.1-_HH5hwnN11aOfQ3A8bJGhw.BHy5DXjCThMjKh1dkPpadHq7a9hMY1XTx5XFG6ESZi7oZqOh32Uad91FF.inwZxdLcnwKMlx87jauZAF65T0; path=/; expires=Mon, 03-Nov-25 02:31:09 GMT; domain=.ramp.com; HttpOnly; Secure; SameSite=None
Other Headers
15 headers
Alt-Svc
Other
h3=":443"; ma=86400
Cf-Cache-Status
Other
DYNAMIC
Cf-Ray
Other
99884835a9cea9c4-IAD
Date
Other
Mon, 03 Nov 2025 02:01:09 GMT
Link
Other
</_next/static/media/05929e924c8cf8f2-s.p.woff?dpl=dpl_Fhg28ktGf7dzyGiky6RZ2tZSFKPm>; rel=preload; as="font"; crossorigin=""; type="font/woff", </_next/static/media/0e797165e26b272a-s.p.woff2?dpl=dpl_Fhg28ktGf7dzyGiky6RZ2tZSFKPm>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/0f04903bd21782ae-s.p.woff2?dpl=dpl_Fhg28ktGf7dzyGiky6RZ2tZSFKPm>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/2cb5b85dc376bd0d-s.p.woff2?dpl=dpl_Fhg28ktGf7dzyGiky6RZ2tZSFKPm>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/47b7701dc941e3e8-s.p.otf?dpl=dpl_Fhg28ktGf7dzyGiky6RZ2tZSFKPm>; rel=preload; as="font"; crossorigin=""; type="font/otf", </_next/static/media/4e598a2b8093b494-s.p.woff?dpl=dpl_Fhg28ktGf7dzyGiky6RZ2tZSFKPm>; rel=preload; as="font"; crossorigin=""; type="font/woff", </_next/static/media/900b7e7fda3583d7-s.p.woff?dpl=dpl_Fhg28ktGf7dzyGiky6RZ2tZSFKPm>; rel=preload; as="font"; crossorigin=""; type="font/woff", </_next/static/media/a7da9d30c6962750-s.p.woff2?dpl=dpl_Fhg28ktGf7dzyGiky6RZ2tZSFKPm>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/c4bc801764720ad8-s.p.woff?dpl=dpl_Fhg28ktGf7dzyGiky6RZ2tZSFKPm>; rel=preload; as="font"; crossorigin=""; type="font/woff", </_next/static/media/cd04ca8f27723f2e-s.p.woff?dpl=dpl_Fhg28ktGf7dzyGiky6RZ2tZSFKPm>; rel=preload; as="font"; crossorigin=""; type="font/woff", </_next/static/media/e75e94b4d4c2e6c3-s.p.woff?dpl=dpl_Fhg28ktGf7dzyGiky6RZ2tZSFKPm>; rel=preload; as="font"; crossorigin=""; type="font/woff", </_next/static/media/fc48f6c3d3013c70-s.p.woff2?dpl=dpl_Fhg28ktGf7dzyGiky6RZ2tZSFKPm>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/css/77ea1b03754da749.css?dpl=dpl_Fhg28ktGf7dzyGiky6RZ2tZSFKPm>; rel=preload; as="style", </_next/static/css/59f3bfdf2ecb6358.css?dpl=dpl_Fhg28ktGf7dzyGiky6RZ2tZSFKPm>; rel=preload; as="style", </_next/static/css/237b35a9755f9a15.css?dpl=dpl_Fhg28ktGf7dzyGiky6RZ2tZSFKPm>; rel=preload; as="style"
Ramp-Worker-Name
Other
prod-app-worker
X-Current-Origin
Other
https://next.ramp.com
X-Current-Path
Other
/
X-Current-Url
Other
https://next.ramp.com/
X-Forwarded-Host
Other
next.ramp.com
X-Matched-Path
Other
/
X-Ramp-Body-Source
Other
next
X-Ramp-Original-Host
Other
ramp.com
X-Vercel-Cache
Other
MISS
X-Vercel-Id
Other
iad1::iad1::smsj9-1762135268798-4cf86dc4b147
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology
Analysis completed in 4ms