Open
Cached
·
just now
18
Headers
Detected Technologies from Headers
AWS API Gateway
AWS CloudFront
Bugcrowd
Zscaler
Google Tag Manager
Intellimize (Webflow)
Bugsnag
Spotify
Piwik PRO
PathFactory
RudderStack
Google Hosted Libraries
AppNexus (Xandr)
Mux
Outgrow
Netlify
UserSnap
Reddit
Yahoo
Capterra
Google DoubleClick
AdRoll
Google Analytics
Microsoft Advertising
Crazy Egg
Google Conversion Tracking
Pusher
6sense
BugHerd
Segment
Cloudflare CDN
Next.js
Kickfire
Google Fonts
Full Circle Insights
Wistia
RevSure
Issuu
LinkedIn
ZoomInfo
Google Search
Adobe Marketo
Adobe Dynamic Tag Management
Google Cloud Functions
Qualified
Storylane
Facebook
Amazon S3
StackAdapt
Salesforce Sites
Cloudflare CDNJS
AWS
Active incidents
jQuery
MNTN
IP-API
TechTarget
Akamai
Active incidents
YouTube
The Trade Desk
Microsoft Clarity
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000; preload
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Vary
Accept-Encoding
vary: Accept-Encoding
Caching Headers
Age
225
Cache-Control
public,max-age=0,must-revalidate
age: 225 cache-control: public,max-age=0,must-revalidate
Content Headers
Content-Type
text/html; charset=utf-8
content-type: text/html; charset=utf-8
Server Headers
Server
cloudflare
X-Powered-By
server: cloudflare x-powered-by:
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Cache-Status
"Netlify Durable"; hit; ttl=375, "Next.js"; hit, "Netlify Edge"; fwd=stale; fwd-status=304; ttl=-14578; stored
Cf-Cache-Status
DYNAMIC
Cf-Ray
a5579ac53a58fbb3-IAD
Date
Thu, 05 Nov 2026 00:05:03 GMT
Netlify-Vary
query=__nextDataReq|_rsc, header=x-nextjs-data|x-next-debug-logging|next-router-prefetch|next-router-segment-prefetch|next-router-state-tree|next-url|rsc|accept-encoding, cookie=__prerender_bypass|__next_preview_data
Report-To
Group
default
max-age: 18w
X-Nextjs-Date
Thu, 05 Nov 2026 00:01:34 GMT
X-Nf-Request-Id
01M6MGBXTTQ6RYAYCKMBWKEPRZ
cache-status: "Netlify Durable"; hit; ttl=375, "Next.js"; hit, "Netlify Edge"; fwd=stale; fwd-status=304; ttl=-14578; stored
cf-cache-status: DYNAMIC
cf-ray: a5579ac53a58fbb3-IAD
date: Thu, 05 Nov 2026 00:05:03 GMT
netlify-vary: query=__nextDataReq|_rsc, header=x-nextjs-data|x-next-debug-logging|next-router-prefetch|next-router-segment-prefetch|next-router-state-tree|next-url|rsc|accept-encoding, cookie=__prerender_bypass|__next_preview_data
report-to: {"group":"default","max_age":10886400,"endpoints":[{"url":"https://www.zscaler.com/api/report-csp-violation"}],"include_subdomains":true}
x-nextjs-date: Thu, 05 Nov 2026 00:01:34 GMT
x-nf-request-id: 01M6MGBXTTQ6RYAYCKMBWKEPRZ
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology