Open
Cached
·
just now
41
Headers
Detected Technologies from Headers
YouTube
Algolia
Amazon S3
Customer.io
Datadog
Facebook
Google Analytics
Google Conversion Tracking
Google DoubleClick
Google reCAPTCHA
Google Search
Google Static File Front End
Google Tag Manager
HubSpot
Active incidents
HubSpot Forms
Active incidents
Intercom
LinkedIn
Next.js
Sanity
Segment
Sentry
Typeform
Vercel
Vimeo
Wistia
Google Cloud
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=63072000; includeSubDomains; preload
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Strengthen CSP by removing 'unsafe-eval'
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Vary
rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
connection: close vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
Caching Headers
Age
1923
Cache-Control
public, s-maxage=3600, stale-while-revalidate=86400
Etag
"ygsxo95yks9csm"
age: 1923 cache-control: public, s-maxage=3600, stale-while-revalidate=86400 etag: "ygsxo95yks9csm"
Content Headers
Content-Length
436558
Content-Type
text/html; charset=utf-8
content-length: 436558 content-type: text/html; charset=utf-8
Server Headers
Server
Vercel
X-Powered-By
Next.js
server: Vercel x-powered-by: Next.js
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Accept
*/*
Date
Fri, 01 May 2026 20:03:28 GMT
Forwarded
for=152.233.42.196;host=www.urllo.com;proto=https
Reporting-Endpoints
browser-intake-datadoghq="https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba7ce83828fe5d17ad4afde450531f242&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Aer-www%2Cenv%3Aprod%2Cversion%3A2f3f689140653620619c949f01372a32d3f7d6c3"
User-Agent
mint/1.7.1
X-Current-Path
/
X-Forwarded-For
152.233.42.196
X-Forwarded-Host
www.urllo.com
X-Forwarded-Proto
https
X-Invocation-Id
iad1::wvt4t-1777667732324-e1dd17a08e13
X-Matched-Path
/
X-Nextjs-Prerender
1
X-Nextjs-Stale-Time
300
X-Real-Ip
152.233.42.196
X-Vercel-Cache
HIT
X-Vercel-Id
iad1:iad1::iad1::wvt4t-1777667732324-e1dd17a08e13
X-Vercel-Ip-As-Number
60068
X-Vercel-Ip-City
Ashburn
X-Vercel-Ip-Continent
NA
X-Vercel-Ip-Country
US
X-Vercel-Ip-Country-Region
VA
X-Vercel-Ip-Latitude
39.0469
X-Vercel-Ip-Longitude
-77.4903
X-Vercel-Ip-Postal-Code
20149
X-Vercel-Ip-Timezone
America/New_York
X-Vercel-Ja4-Digest
t13d640700_70d83611e2fb_bc99fca5e491
X-Vercel-Proxied-For
152.233.42.196
accept: */* date: Fri, 01 May 2026 20:03:28 GMT forwarded: for=152.233.42.196;host=www.urllo.com;proto=https reporting-endpoints: browser-intake-datadoghq="https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba7ce83828fe5d17ad4afde450531f242&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Aer-www%2Cenv%3Aprod%2Cversion%3A2f3f689140653620619c949f01372a32d3f7d6c3" user-agent: mint/1.7.1 x-current-path: / x-forwarded-for: 152.233.42.196 x-forwarded-host: www.urllo.com x-forwarded-proto: https x-invocation-id: iad1::wvt4t-1777667732324-e1dd17a08e13 x-matched-path: / x-nextjs-prerender: 1 x-nextjs-stale-time: 300 x-real-ip: 152.233.42.196 x-vercel-cache: HIT x-vercel-id: iad1:iad1::iad1::wvt4t-1777667732324-e1dd17a08e13 x-vercel-ip-as-number: 60068 x-vercel-ip-city: Ashburn x-vercel-ip-continent: NA x-vercel-ip-country: US x-vercel-ip-country-region: VA x-vercel-ip-latitude: 39.0469 x-vercel-ip-longitude: -77.4903 x-vercel-ip-postal-code: 20149 x-vercel-ip-timezone: America/New_York x-vercel-ja4-digest: t13d640700_70d83611e2fb_bc99fca5e491 x-vercel-proxied-for: 152.233.42.196
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology