Open
Cached
·
just now
20
Headers
Detected Technologies from Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=63072000
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
origin-when-cross-origin
Permissions-Policy
Present
autoplay=(self), geolocation=(), microphone=(); +1 more
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
Performance Headers
Connection
close
Transfer-Encoding
chunked
Vary
rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
connection: close transfer-encoding: chunked vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
Caching Headers
Age
0
Cache-Control
private, no-cache, no-store, max-age=0, must-revalidate
age: 0 cache-control: private, no-cache, no-store, max-age=0, must-revalidate
Content Headers
Content-Type
text/html; charset=utf-8
content-type: text/html; charset=utf-8
Server Headers
server: Vercel x-powered-by: Next.js
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Wed, 06 May 2026 17:09:23 GMT
Document-Policy
js-profiling
Link
URL
/.well-known/api-catalog
rel=api-catalog
URL
/_next/static/media/abc_favorit_book.p.0or15w12zowqm.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/abc_favorit_medium.p.07z90h2q5wq-8.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/commit_mono_italic.p.0_9c8p15epbr_.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX
rel=preload
as=font
crossorigin
type=font/woff2
URL
/.well-known/api-catalog
rel=api-catalog
URL
/_next/static/media/abc_favorit_book.p.0or15w12zowqm.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/abc_favorit_medium.p.07z90h2q5wq-8.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/commit_mono_italic.p.0_9c8p15epbr_.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/commit_mono_regular.p.0a~a27026uqvh.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/domaine_bold.p.0vmrcg~.1eleq.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/domaine_medium.p.0q2xq1frl9er~.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/domaine_regular.p.0e_gg6~4pmz90.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX
rel=preload
as=font
crossorigin
type=font/woff2
URL
/_next/static/media/inter_variable.p.0r27kd5h06n72.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX
rel=preload
as=font
crossorigin
type=font/woff2
X-Matched-Path
/
date: Wed, 06 May 2026 17:09:23 GMT document-policy: js-profiling link: </.well-known/api-catalog>; rel="api-catalog", </_next/static/media/abc_favorit_book.p.0or15w12zowqm.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/abc_favorit_medium.p.07z90h2q5wq-8.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/commit_mono_italic.p.0_9c8p15epbr_.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/commit_mono_regular.p.0a~a27026uqvh.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/domaine_bold.p.0vmrcg~.1eleq.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/domaine_medium.p.0q2xq1frl9er~.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/domaine_regular.p.0e_gg6~4pmz90.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_next/static/media/inter_variable.p.0r27kd5h06n72.woff2?dpl=dpl_DTRiXqck1WiABdY87rdRvtUZHdeX>; rel=preload; as="font"; crossorigin=""; type="font/woff2" x-matched-path: / x-vercel-cache: MISS x-vercel-id: iad1::iad1::98vsh-1778087363449-2a5b6f6de4fc
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology