Open
Cached
·
just now
20
Headers
Detected Technologies from Headers
AWS API Gateway
AWS CloudFront
Bugcrowd
Zscaler
Google Tag Manager
Intellimize (Webflow)
Bugsnag
Spotify
Piwik PRO
PathFactory
RudderStack
Google Hosted Libraries
AppNexus (Xandr)
Mux
Outgrow
Netlify
UserSnap
Reddit
Yahoo
Capterra
Google DoubleClick
AdRoll
Google Analytics
Microsoft Advertising
Crazy Egg
Google Conversion Tracking
Pusher
6sense
BugHerd
Segment
Active incidents
Cloudflare CDN
Next.js
Kickfire
Google Fonts
Full Circle Insights
Wistia
RevSure
Issuu
LinkedIn
ZoomInfo
Google Search
Adobe Marketo
Adobe Dynamic Tag Management
Google Cloud Functions
Qualified
Storylane
Facebook
Amazon S3
StackAdapt
Salesforce Sites
Cloudflare CDNJS
AWS
Active incidents
jQuery
MNTN
IP-API
TechTarget
Akamai
Active incidents
YouTube
The Trade Desk
Microsoft Clarity
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000; preload
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Transfer-Encoding
chunked
Vary
Accept-Encoding
connection: close transfer-encoding: chunked vary: Accept-Encoding
Caching Headers
Age
574
Cache-Control
public,max-age=0,must-revalidate
age: 574 cache-control: public,max-age=0,must-revalidate
Content Headers
Content-Type
text/html; charset=utf-8
content-type: text/html; charset=utf-8
Server Headers
Server
cloudflare
X-Powered-By
server: cloudflare x-powered-by:
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Cache-Status
"Netlify Durable"; hit; ttl=25, "Next.js"; hit, "Netlify Edge"; fwd=stale; fwd-status=304; ttl=-478; stored
Cf-Cache-Status
DYNAMIC
Cf-Ray
a50a69ae0e2ed227-IAD
Date
Mon, 26 Oct 2026 15:14:48 GMT
Netlify-Vary
query=__nextDataReq|_rsc,header=x-nextjs-data|x-next-debug-logging|next-router-prefetch|next-router-segment-prefetch|next-router-state-tree|next-url|rsc|accept-encoding,cookie=__prerender_bypass|__next_preview_data
Report-To
Group
default
max-age: 18w
X-Nextjs-Date
Mon, 26 Oct 2026 15:10:11 GMT
X-Nf-Request-Id
01M5WCEJ69Q5SK64X8Z7FCX2J1
cache-status: "Netlify Durable"; hit; ttl=25, "Next.js"; hit, "Netlify Edge"; fwd=stale; fwd-status=304; ttl=-478; stored
cf-cache-status: DYNAMIC
cf-ray: a50a69ae0e2ed227-IAD
date: Mon, 26 Oct 2026 15:14:48 GMT
netlify-vary: query=__nextDataReq|_rsc,header=x-nextjs-data|x-next-debug-logging|next-router-prefetch|next-router-segment-prefetch|next-router-state-tree|next-url|rsc|accept-encoding,cookie=__prerender_bypass|__next_preview_data
report-to: {"group":"default","max_age":10886400,"endpoints":[{"url":"https://www.zscaler.com/api/report-csp-violation"}],"include_subdomains":true}
x-nextjs-date: Mon, 26 Oct 2026 15:10:11 GMT
x-nf-request-id: 01M5WCEJ69Q5SK64X8Z7FCX2J1
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology