Open
Cached
·
just now
19
Headers
Detected Technologies from Headers
AWS CloudFront
Adobe Marketo
AWS
Microsoft Advertising
CaliberMind
Contentsquare
Facebook
Google Analytics
Google DoubleClick
Google Search
Google Tag Manager
LinkedIn
Microsoft Clarity
Next.js
OpenAI
Optimizely
Qualified
Quora
Reddit
6sense
Active incidents
The Trade Desk
Vercel
ZoomInfo
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=63072000
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Transfer-Encoding
chunked
Vary
rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
connection: close transfer-encoding: chunked vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
Caching Headers
Age
2696
Cache-Control
public, max-age=0, must-revalidate
age: 2696 cache-control: public, max-age=0, must-revalidate
Content Headers
Content-Type
text/html; charset=utf-8
content-type: text/html; charset=utf-8
Server Headers
server: Vercel x-powered-by: Next.js
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Thu, 20 Aug 2026 16:52:45 GMT
Link
Other
rel=preload
as=font
crossorigin=anonymous
type=font/woff2
rel=preload
as=font
crossorigin=anonymous
type=font/woff2
rel=preload
as=font
crossorigin=anonymous
type=font/woff2
rel=preload
as=font
crossorigin=anonymous
type=font/woff2
rel=preload
as=font
crossorigin=anonymous
type=font/woff2
rel=preload
as=font
crossorigin=anonymous
type=font/woff2
rel=preload
as=font
crossorigin=anonymous
type=font/woff2
rel=preload
as=font
crossorigin=anonymous
type=font/woff2
rel=preload
as=image
fetchpriority=high
X-Locale
en
X-Matched-Path
/en
date: Thu, 20 Aug 2026 16:52:45 GMT link: </fonts/vc-henrietta/HenriettaCondensed-Bold.woff2>; rel=preload; as="font"; crossorigin="anonymous"; type="font/woff2", </fonts/vc-nudge/NudgeSemiNormal-SemiNormalExtraBold.woff2>; rel=preload; as="font"; crossorigin="anonymous"; type="font/woff2", </fonts/die-grotesk/die-grotesk-b-regular.woff2>; rel=preload; as="font"; crossorigin="anonymous"; type="font/woff2", </fonts/die-grotesk/die-grotesk-b-medium.woff2>; rel=preload; as="font"; crossorigin="anonymous"; type="font/woff2", </fonts/material-symbols/material-symbols-rounded-subset.woff2>; rel=preload; as="font"; crossorigin="anonymous"; type="font/woff2", <https://images3.cmp.optimizely.com/Zz03NDNhMDI0MjU2MDAxMWYxODFjYzE2ZGJmMWRhNDM3Ng==?width=1920>; rel=preload; as="image"; fetchpriority="high" x-locale: en x-matched-path: /en x-nextjs-prerender: 1 x-nextjs-stale-time: 300 x-vercel-cache: HIT x-vercel-id: iad1::iad1::d5zts-1787359838758-8dcca4365c28
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology