Open
Cached
·
just now
20
Headers
Detected Technologies from Headers
GitHub
Google AdSense
Google Tag Manager
Bing
Google Hosted Libraries
AppNexus (Xandr)
Zapier
Advertising.com
Trustpilot
Google DoubleClick
Google Analytics
ClickCease
Microsoft Advertising
Google Conversion Tracking
Imgix
Google Cloud Storage
Google Static File Front End
Next.js
Google Fonts
Twitter
ChatSupport
LinkedIn
Tapfiliate
Google Search
Facebook
Instagram
Adobe Fonts (Typekit)
TikTok
Vercel
Smartlook
Rubicon Project
YouTube
Microsoft Clarity
Sentry
Google Cloud
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Vary
Accept-Encoding
connection: close vary: Accept-Encoding
Caching Headers
Cache-Control
s-maxage=31536000, stale-while-revalidate
Etag
"47oo1b85x21v5l"
cache-control: s-maxage=31536000, stale-while-revalidate etag: "47oo1b85x21v5l"
Content Headers
Content-Length
87054
Content-Type
text/html; charset=utf-8
content-length: 87054 content-type: text/html; charset=utf-8
Server Headers
Server
Google Frontend
X-Powered-By
Next.js
server: Google Frontend x-powered-by: Next.js
CORS Headers
Access-Control-Allow-Headers
Origin, X-Requested-With, X-Forwarded-For, Content-Type, Accept
Access-Control-Allow-Origin
*
access-control-allow-headers: Origin, X-Requested-With, X-Forwarded-For, Content-Type, Accept access-control-allow-origin: *
Cookies Headers
Other Headers
Alt-Svc
h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Date
Tue, 24 Feb 2026 17:17:53 GMT
Via
1.1 google
X-Cloud-Trace-Context
bc26f912abb48cb182c8aa4e60b8e9af;o=1
X-Nextjs-Cache
HIT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 date: Tue, 24 Feb 2026 17:17:53 GMT via: 1.1 google x-cloud-trace-context: bc26f912abb48cb182c8aa4e60b8e9af;o=1 x-nextjs-cache: HIT
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology