gemini.com | Analytics by SecurityHeaders

HTTP Headers report for gemini.com

Header Name Header Data
HTTP status code 200
Content-Type text/html; charset=utf-8
Cache-Status "Netlify Edge"; hit
X-Nextjs-Date Sat, 05 Apr 2025 01:17:36 GMT
X-Nextjs-Prerender 1
Etag W/"yku49cd8gkom0m-df"
X-Amz-Cf-Id K7I9OC1h5zo2Cx1ULi0m_I-tZxTigtjD-GAjEm4Gu1d-jx3jitEt5A==
Netlify-Vary query=__nextDataReq,header=x-nextjs-data|x-next-debug-logging|RSC|Next-Router-State-Tree|Next-Router-Prefetch|Next-Router-Segment-Prefetch|Accept-Encoding,cookie=__prerender_bypass|__next_preview_data
X-Content-Type-Options nosniff
Date Sat, 05 Apr 2025 21:45:37 GMT
Vary Accept-Encoding
Content-Security-Policy connect-src 'self' https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://api.hsforms.com https://*.algolia.net https://cdn.contentful.com https://*.algolianet.com https://analytics.tiktok.com/ https://api.gemini.com https://api.mixpanel.com https://api.coingecko.com https://bat.bing.com https://bnc.lt https://boards-api.greenhouse.io/v1/boards/gemini/jobs https://boards.greenhouse.io https://cdn.builder.io https://exchange.gemini.com https://exchange.qa001.aurora7.net https://geminiexchange.app.link https://graphql.contentful.com https://*.hubspot.com https://preview.contentful.com https://stats.g.doubleclick.net https://tr.snapchat.com https://www.gemini.com https://www.google-analytics.com wss://api.gemini.com/v2/marketdata https://exchange.qa100.aurora7.net https://exchange.gemini.com https://mobile.gemini.com https://exchange.sandbox.gemini.com https://analytics.google.com https://*.clarity.ms https://*.mmin.io https://*.moneymade.io https://*.us.sentry.io https://px.ads.linkedin.com https://px.ads.linkedin.com/attribution_trigger https://px.ads.linkedin.com/collect https://prod.spline.design https://fonts.gstatic.com; img-src 'self' data: https://cdn.builder.io https://exceptions.hs-embed-reporting.com https://static.hsappstatic.net http://assets.ctfassets.net http://images.ctfassets.net http://t.co https://analytics.twitter.com https://bat.bing.com https://boards-api.greenhouse.io/v1/boards/gemini/jobs https://cdn-images-1.medium.com https://cx.atdmt.com https://data.adxcel-ec2.com https://images.ctfassets.net https://*.hsforms.com https://*.hubspot.com https://resources.vzaar.com https://stats.g.doubleclick.net https://tags.w55c.net https://view.vzaar.com https://www.facebook.com https://www.gemini.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://fonts.gstatic.com https://tr.snapchat.com images.contentful.com videos.contentful.com videos.ctfassets.net https://*.clarity.ms https://*.mmin.io https://*.moneymade.io https://c.bing.com https://geminym-social-images-public.s3.amazonaws.com https://geminym-social-images-delta-public.s3.amazonaws.com https://geminym-social-images-dev-public.s3.amazonaws.com https://px.ads.linkedin.com/collect https://d1il5533o350rp.cloudfront.net/pixel.gif https://trkn.us; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.builder.io https://js.hsforms.net https://analytics.tiktok.com https://analytics.twitter.com https://app.link https://bat.bing.com https://bat.bing.com https://boards-api.greenhouse.io/v1/boards/gemini/jobs https://boards.greenhouse.io https://cdnjs.cloudflare.com/ajax/libs/gsap/ https://cdnjs.cloudflare.com/ajax/libs/ScrollMagic/ https://codepen.io https://connect.facebook.net https://googleads.g.doubleclick.net https://js.hsadspixel.net https://js.hscollectedforms.net https://*.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://*.mountain.com https://s.ytimg.com https://sc-static.net https://stats.g.doubleclick.net https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.youtube.com static.ads-twitter.com https://*.clarity.ms https://*.mmin.io https://*.moneymade.io https://*.twitter.com https://snap.licdn.com/li.lms-analytics/insight.min.js https://snap.licdn.com/li.lms-analytics/insight.old.min.js; style-src 'self' 'unsafe-inline' https://cloud.typography.com https://fonts.googleapis.com https://static.gemini.com https://use.typekit.net https://www.googletagmanager.com https://*.mmin.io https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://p.typekit.net/p.css; font-src 'self' data: https://use.typekit.net https://fonts.gstatic.com; frame-src data: https://forms.hsforms.com/ http://assets.ctfassets.net https://videos.ctfassets.net https://*.doubleclick.net https://boards.greenhouse.io https://codepen.io https://docs.google.com/ https://tr.snapchat.com https://tr6.snapchat.com https://www.facebook.com https://www.gemini.com https://www.google.com https://www.youtube.com https://platform.twitter.com https://*.mmin.io https://www.googletagmanager.com; media-src 'self' https://video.vzaar.com https://view.vzaar.com images.contentful.com videos.contentful.com videos.ctfassets.net https://cdn.builder.io; object-src https://www.gemini.com http://assets.ctfassets.net; default-src 'self' https://*.clarity.ms https://*.mmin.io https://*.moneymade.io https://c.bing.com; base-uri 'self'; form-action 'self' https://forms.hsforms.com/ https://www.facebook.com https://tr.snapchat.com https://support.gemini.com/hc/search; manifest-src 'self'; frame-ancestors 'self'; report-to https://exchange.gemini.com/collect-csp;
Link <https://www.gemini.com/>; rel="alternate"; hreflang="en-US", <https://www.gemini.com/es-LA>; rel="alternate"; hreflang="es-LA", <https://www.gemini.com/pt-BR>; rel="alternate"; hreflang="pt-BR", <https://www.gemini.com/it-IT>; rel="alternate"; hreflang="it-IT", <https://www.gemini.com/fr-FR>; rel="alternate"; hreflang="fr-FR", <https://www.gemini.com/>; rel="alternate"; hreflang="x-default"
Server Netlify
X-Middleware-Set-Cookie NEXT_LOCALE=en-US; Path=/; Expires=Sun, 05 Apr 2026 15:33:46 GMT; Max-Age=31536000; SameSite=lax
X-Nextjs-Stale-Time 4294967294
X-Amz-Cf-Pop AMS58-P6
X-Cache RefreshHit from cloudfront
Via 1.1 c88ca2a75ca16a71cee4beefb2f6e6b8.cloudfront.net (CloudFront)
Connection keep-alive
Strict-Transport-Security max-age=31536000
X-Middleware-Rewrite /en-US
X-Nf-Request-Id 01JR39CA7Z4J1280SVAQNB3QD7
Cache-Control public,max-age=0,must-revalidate

About the tool

By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.

This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.

We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.

Watch it now at TrustRadar