HTTP Headers Analysis for https://selfdriven.careers

Open Cached · just now

26 Headers

Detected Technologies from Headers

See all in URL Inspect 2

Google Static File Front End

Next.js

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

camera=(), microphone=(), geolocation=()

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

Vary

Performance

rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding,cookie,need-authorization, x-fh-requested-host, accept-encoding

accept-ranges: bytes
connection: close
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding,cookie,need-authorization, x-fh-requested-host, accept-encoding

Caching Headers

Cache-Control

Caching

public, s-maxage=60, stale-while-revalidate=60

Etag

Caching

"omvk05qbhu1zvg"

cache-control: public, s-maxage=60, stale-while-revalidate=60
etag: "omvk05qbhu1zvg"

Content Headers

Content-Length

Content

93198

Content-Type

Content

text/html; charset=utf-8

content-length: 93198
content-type: text/html; charset=utf-8

Server Headers

Server

Google Frontend

X-Powered-By

Server

Next.js

server: Google Frontend
x-powered-by: Next.js

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Alt-Svc

Other

h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Date

Other

Sat, 12 Sep 2026 07:23:05 GMT

Link

Other

URL /.well-known/api-catalog

rel=api-catalog type=application/linkset+json

URL /.well-known/openid-configuration

rel=openid-configuration title=OpenID Connect Discovery

URL /.well-known/oauth-authorization-server

rel=oauth-authorization-server title=OAuth 2.0 Authorization Server Metadata

URL /.well-known/oauth-protected-resource

rel=oauth-protected-resource title=OAuth Protected Resource Metadata

URL /.well-known/api-catalog

rel=api-catalog type=application/linkset+json

URL /.well-known/openid-configuration

rel=openid-configuration title=OpenID Connect Discovery

URL /.well-known/oauth-authorization-server

rel=oauth-authorization-server title=OAuth 2.0 Authorization Server Metadata

URL /.well-known/oauth-protected-resource

rel=oauth-protected-resource title=OAuth Protected Resource Metadata

URL /.well-known/mcp/server-card.json

rel=mcp-server-card title=MCP Server Card

URL /.well-known/agent-skills/index.json

rel=agent-skills title=Agent Skills Discovery Index

URL /.well-known/webmcp

rel=webmcp title=WebMCP Tools

URL /tools/ielts-writing-evaluator

rel=agent-skill title=IELTS Writing Evaluator

URL /tools/career-pathways

rel=agent-skill title=Career Pathways Navigator

URL /tools/mba-professor

rel=agent-skill title=MBA Professor AI

URL /tools/study-buddy

rel=agent-skill title=AI Study Buddy

URL /study-abroad

rel=service-doc title=Study Abroad Services

URL /career-counseling

rel=service-doc title=Career Counseling Services

URL /sitemap

rel=alternate type=application/xml title=Sitemap

X-Cache

Other

MISS

X-Cache-Hits

Other

X-Country-Code

Other

X-Fah-Adapter

Other

nextjs-14.0.21

X-Nextjs-Cache

Other

HIT

X-Nextjs-Prerender

Other

1,1

X-Nextjs-Stale-Time

Other

300

X-Served-By

Other

cache-lga21968-LGA

X-Timer

Other

S1789197785.291485,VS0,VE136

alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
date: Sat, 12 Sep 2026 07:23:05 GMT
link: </.well-known/api-catalog>; rel="api-catalog"; type="application/linkset+json", </.well-known/openid-configuration>; rel="openid-configuration"; title="OpenID Connect Discovery", </.well-known/oauth-authorization-server>; rel="oauth-authorization-server"; title="OAuth 2.0 Authorization Server Metadata", </.well-known/oauth-protected-resource>; rel="oauth-protected-resource"; title="OAuth Protected Resource Metadata", </.well-known/mcp/server-card.json>; rel="mcp-server-card"; title="MCP Server Card", </.well-known/agent-skills/index.json>; rel="agent-skills"; title="Agent Skills Discovery Index", </.well-known/webmcp>; rel="webmcp"; title="WebMCP Tools", </tools/ielts-writing-evaluator>; rel="agent-skill"; title="IELTS Writing Evaluator", </tools/career-pathways>; rel="agent-skill"; title="Career Pathways Navigator", </tools/mba-professor>; rel="agent-skill"; title="MBA Professor AI", </tools/study-buddy>; rel="agent-skill"; title="AI Study Buddy", </study-abroad>; rel="service-doc"; title="Study Abroad Services", </career-counseling>; rel="service-doc"; title="Career Counseling Services", </sitemap>; rel="alternate"; type="application/xml"; title="Sitemap"
x-cache: MISS
x-cache-hits: 0
x-country-code: US
x-fah-adapter: nextjs-14.0.21
x-nextjs-cache: HIT
x-nextjs-prerender: 1,1
x-nextjs-stale-time: 300
x-served-by: cache-lga21968-LGA
x-timer: S1789197785.291485,VS0,VE136

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology