Open
Cached
·
just now
17
Headers
Detected Technologies from Headers
Plyr
AWS CloudFront
YouTube
Chili Piper
Google Tag Manager
CodeSandbox
Netlify
HubSpot Forms
Google DoubleClick
Spline
Google Analytics
Microsoft Advertising
6sense
Google API JS Client
Leadfeeder
Google Fonts
Twitter
Hotjar
LinkedIn
Contentful
ZoomInfo
Active incidents
HubSpot Analytics
unpkg
Google Search
Adobe Marketo
Facebook
OneTrust
GitHub
Active incidents
Heap
Cloudflare CDNJS
Vimeo
TrustArc
HubSpot
Intercom
Font Awesome
Lever
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Accept-Ranges
bytes
Connection
close
accept-ranges: bytes connection: close
Caching Headers
Cache-Control
public,max-age=0,must-revalidate
Etag
"ce8481ce9e089a188065344c672ad3c8-ssl"
cache-control: public,max-age=0,must-revalidate etag: "ce8481ce9e089a188065344c672ad3c8-ssl"
Content Headers
Content-Length
740550
Content-Type
text/html; charset=UTF-8
content-length: 740550 content-type: text/html; charset=UTF-8
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Tue, 14 Apr 2026 04:30:53 GMT
X-Nf-Request-Id
01KP2TJ82D3WTZC93CJGYB4PH4
cache-status: "Netlify Edge"; hit date: Tue, 14 Apr 2026 04:30:53 GMT via: 1.1 4685cae701bd588fa0176a1c8b1e52f4.cloudfront.net (CloudFront) x-amz-cf-id: dndD3GoHeUGiyeRy8hXE9V3Yb1O5Epr62RTA-nXNHL8EZ-y0mz5x2A== x-amz-cf-pop: IAD12-P2 x-cache: RefreshHit from cloudfront x-nf-request-id: 01KP2TJ82D3WTZC93CJGYB4PH4
Recommendations
Enable compression (gzip/brotli) to improve performance