Open
Cached
·
just now
11
Headers
Detected Technologies from Headers
YouTube
Adobe Marketo
AMP
ASP.NET
Microsoft ASP.NET CDN
AzureFrontDoor
CookieYes
Oracle Eloqua
Facebook
Google Analytics
Google API JS Client
Google DoubleClick
Google Search
Google Static File Front End
Google Tag Manager
Hotjar
HubSpot
HubSpot Analytics
jQuery
LinkedIn
Microsoft IIS
Stripe
Twitter
Zendesk
Google Cloud
Microsoft Azure
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
connection: close
Caching Headers
Cache-Control
no-cache
Expires
-1
Pragma
no-cache
cache-control: no-cache expires: -1 pragma: no-cache
Content Headers
Content-Length
54069
Content-Type
text/html; charset=utf-8
content-length: 54069 content-type: text/html; charset=utf-8
Server Headers
Server
Microsoft-IIS/10.0
X-Aspnet-Version
4.0.30319
X-Powered-By
ASP.NET
server: Microsoft-IIS/10.0 x-aspnet-version: 4.0.30319 x-powered-by: ASP.NET
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Mon, 25 May 2026 08:16:56 GMT
date: Mon, 25 May 2026 08:16:56 GMT
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology