HTTP Headers Analysis for https://www.spicyapi.ai

Detected Technologies from Headers

See all in URL Inspect 7

Cloudflare NEL Monitoring

Cloudflare CDN

Cloudflare Turnstile

Cloudflare Web Analytics

Google Analytics

Google Tag Manager

Next.js

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Good

default-src; script-src; style-src; +11 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

camera=(), microphone=(), geolocation=(); +1 more

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Strengthen CSP by removing 'unsafe-eval'

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Next-Url, X-Vinext-Interception-Context, X-Vinext-Interception-Id, X-Vinext-Mounted-Slots, X-Vinext-Rsc-Render-Mode, X-Vinext-Rsc-State-Fingerprint

connection: close
transfer-encoding: chunked
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Next-Url, X-Vinext-Interception-Context, X-Vinext-Interception-Id, X-Vinext-Mounted-Slots, X-Vinext-Rsc-Render-Mode, X-Vinext-Rsc-State-Fingerprint

Caching Headers

Age

Caching

1506

Cache-Control

Caching

private, max-age=0, must-revalidate

age: 1506
cache-control: private, max-age=0, must-revalidate

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Ray

Other

a4f8012e7dfcae23-IAD

Date

Other

Sat, 24 Oct 2026 09:37:44 GMT

Link

Other

URL /_next/static/css/vinext-stage-runtime~virtual_vinext-response-stage~virtual_vinext-rsc-entry~layout~layout.CO8gG17g.css

rel=preload as=style

URL /_next/static/_vinext_fonts/archivo-deed4fc47d20/archivo-2a392e77.woff2

rel=preload as=font type=font/woff2 crossorigin

URL /_next/static/_vinext_fonts/instrument-sans-9d9d2b4013ea/instrument-sans-e190a634.woff2

rel=preload as=font type=font/woff2 crossorigin

Nel

Other

Report-To Group cf-nel max-age: 1w

success: 0.0%

Report-To

Other

Group cf-nel max-age: 1w

Endpoint 1 https://a.nel.cloudflare.com/report/v4?s=izH67LC3ADPzP01d7jvgDHD4bbMqDAe2MZ1MdgFNIdjpU6BGNvx3bumGIgngNlUEIihDDHY9C4ShukVl3Gs605OZjJ4cQFAr23mSLj4jVXfWiyUEiTuslM9bWSR0BA%3D%3D

Server-Timing

Other

cfEdge;dur=44,cfOrigin;dur=0,cfWorker;dur=32

Speculation-Rules

Other

"/cdn-cgi/speculation"

X-Nextjs-Cache

Other

HIT

X-Vinext-Build-Id

Other

c93a6139db2d706f4c3bc11824abd6ca

X-Vinext-Cache

Other

HIT

alt-svc: h3=":443"; ma=86400
cf-ray: a4f8012e7dfcae23-IAD
date: Sat, 24 Oct 2026 09:37:44 GMT
link: </_next/static/css/vinext-stage-runtime~virtual_vinext-response-stage~virtual_vinext-rsc-entry~layout~layout.CO8gG17g.css>; rel=preload; as="style", </_next/static/_vinext_fonts/archivo-deed4fc47d20/archivo-2a392e77.woff2>; rel=preload; as=font; type=font/woff2; crossorigin, </_next/static/_vinext_fonts/instrument-sans-9d9d2b4013ea/instrument-sans-e190a634.woff2>; rel=preload; as=font; type=font/woff2; crossorigin
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=izH67LC3ADPzP01d7jvgDHD4bbMqDAe2MZ1MdgFNIdjpU6BGNvx3bumGIgngNlUEIihDDHY9C4ShukVl3Gs605OZjJ4cQFAr23mSLj4jVXfWiyUEiTuslM9bWSR0BA%3D%3D"}]}
server-timing: cfEdge;dur=44,cfOrigin;dur=0,cfWorker;dur=32
speculation-rules: "/cdn-cgi/speculation"
x-nextjs-cache: HIT
x-vinext-build-id: c93a6139db2d706f4c3bc11824abd6ca
x-vinext-cache: HIT

Recommendations

Enable compression (gzip/brotli) to improve performance