Open
Cached
·
just now
19
Headers
Detected Technologies from Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=63072000
X-Frame-Options
Good
sameorigin
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Content-Type-Options: nosniff
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Transfer-Encoding
chunked
Vary
rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
connection: close transfer-encoding: chunked vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
Caching Headers
Age
0
Cache-Control
private, no-cache, no-store, max-age=0, must-revalidate
age: 0 cache-control: private, no-cache, no-store, max-age=0, must-revalidate
Content Headers
Content-Type
text/html; charset=utf-8
content-type: text/html; charset=utf-8
Server Headers
Server
Vercel
X-Powered-By
Next.js
server: Vercel x-powered-by: Next.js
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Content-Signal
ai-train=no, search=yes, ai-input=yes
Date
Mon, 07 Sep 2026 11:03:01 GMT
Link
URL
/.well-known/ai-catalog.json
rel=ai-catalog
URL
/.well-known/api-catalog
rel=api-catalog
URL
/llms.txt
rel=describedby
type=text/plain
URL
/.well-known/openapi/content-api.json
rel=service-desc
type=application/vnd.oai.openapi+json
URL
/.well-known/ai-catalog.json
rel=ai-catalog
URL
/.well-known/api-catalog
rel=api-catalog
URL
/llms.txt
rel=describedby
type=text/plain
URL
/.well-known/openapi/content-api.json
rel=service-desc
type=application/vnd.oai.openapi+json
URL
/.well-known/agent-skills/discover-mentimeter-content/SKILL.md
rel=service-doc
type=text/markdown
URL
/.well-known/agent-skills/index.json
rel=describedby
type=application/json
URL
/.well-known/mcp/server-card.json
rel=mcp-server-card
URL
/_next/static/css/8bb93267f6a6fdb9.css?dpl=dpl_G6kstXD3U5wBRJtFnmHiQ4BXN7Cd
rel=preload
as=style
X-Matched-Path
/[lang]
X-Pathname
/
X-Vercel-Cache
MISS
X-Vercel-Id
iad1::iad1::qw545-1788778981680-2aea2a42e8a7
content-signal: ai-train=no, search=yes, ai-input=yes date: Mon, 07 Sep 2026 11:03:01 GMT link: </.well-known/ai-catalog.json>; rel="ai-catalog", </.well-known/api-catalog>; rel="api-catalog", </llms.txt>; rel="describedby"; type="text/plain", </.well-known/openapi/content-api.json>; rel="service-desc"; type="application/vnd.oai.openapi+json", </.well-known/agent-skills/discover-mentimeter-content/SKILL.md>; rel="service-doc"; type="text/markdown", </.well-known/agent-skills/index.json>; rel="describedby"; type="application/json", </.well-known/mcp/server-card.json>; rel="mcp-server-card", </_next/static/css/8bb93267f6a6fdb9.css?dpl=dpl_G6kstXD3U5wBRJtFnmHiQ4BXN7Cd>; rel=preload; as="style" x-matched-path: /[lang] x-pathname: / x-vercel-cache: MISS x-vercel-id: iad1::iad1::qw545-1788778981680-2aea2a42e8a7
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology