Open
Cached
·
just now
22
Headers
Detected Technologies from Headers
YouTube
Algolia
Amazon S3
Azure Blob Storage
Calendly
Contentful
Google Analytics
Google Conversion Tracking
Google DoubleClick
Google Fonts
Google Search
Google Static File Front End
Google Tag Manager
Greenhouse
HubSpot
HubSpot Analytics
HubSpot Forms
IP-API
LinkedIn
Mixpanel
Next.js
Sentry
Vector
Visual Website Optimizer
Wistia
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer
Permissions-Policy
Present
autoplay=()
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
Performance Headers
Connection
close
Vary
rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding
connection: close vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding
Caching Headers
Cache-Control
public,max-age=3600,s-maxage=300,stale-while-revalidate=31535700
Etag
"10jm0h12c063zgo"
cache-control: public,max-age=3600,s-maxage=300,stale-while-revalidate=31535700 etag: "10jm0h12c063zgo"
Content Headers
Content-Length
186008
Content-Type
text/html; charset=utf-8
content-length: 186008 content-type: text/html; charset=utf-8
Server Headers
Server
Google Frontend
X-Powered-By
Next.js
server: Google Frontend x-powered-by: Next.js
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Alt-Svc
h3=":443"; ma=2592000
Date
Sun, 10 May 2026 01:24:24 GMT
Via
1.1 google
X-Cloud-Trace-Context
dee902a902530745ba35d37d1d2705a9;o=1
X-Nextjs-Cache
HIT
X-Nextjs-Prerender
1
X-Nextjs-Stale-Time
300
alt-svc: h3=":443"; ma=2592000 date: Sun, 10 May 2026 01:24:24 GMT via: 1.1 google x-cloud-trace-context: dee902a902530745ba35d37d1d2705a9;o=1 x-nextjs-cache: HIT x-nextjs-prerender: 1 x-nextjs-stale-time: 300
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology