Open
Cached
·
just now
27
Headers
Detected Technologies from Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=15552000; preload
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
accelerometer=(), attribution-reporting=(self), autoplay=(); +45 more
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
Performance Headers
Connection
close
Transfer-Encoding
chunked
Vary
Accept-Encoding
connection: close transfer-encoding: chunked vary: Accept-Encoding
Caching Headers
Cache-Control
private, no-cache, no-store, must-revalidate
Expires
Sat, 01 Jan 2000 00:00:00 GMT
Pragma
no-cache
cache-control: private, no-cache, no-store, must-revalidate expires: Sat, 01 Jan 2000 00:00:00 GMT pragma: no-cache
Content Headers
Content-Type
text/html; charset="utf-8"
content-type: text/html; charset="utf-8"
Server Headers
No server headers found
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Accept-Ch
viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model
Accept-Ch-Lifetime
4838400
Alt-Svc
h3=":443"; ma=86400
Date
Mon, 02 Nov 2026 20:04:29 GMT
Document-Policy
force-load-at-top, include-js-call-stacks-in-crash-reports
Origin-Agent-Cluster
?1
Report-To
Group
coop_report
max-age: 4w
Group
default
max-age: 3d
Group
permissions_policy
max-age: 6h
Reporting-Endpoints
coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7703667529190628731&cpp=C3&cv=1052682108&st=1793649869066", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
Server-Timing
slb_crtt;dur=9,slb_srtt;dur=-1,slb_req_start;dur=1793649869036073,slb_srv_hdr_rcvd;dur=52381,slb_cli_body_rcvd_first;dur=-1,slb_cli_body_rcvd_last;dur=-1,slb_conn_lat;dur=0,slb_ssl;dur=7,slb_rule_lat;dur=0
X-Fb-Connection-Quality
EXCELLENT; q=0.9, rtt=9, rtx=1, c=10, mss=1368, tbw=3271, tp=-1, tpl=-1, uplat=52, ullat=0
X-Fb-Debug
WZ74ywo15pxSQZzppzofgm9QINKE7yuSZGbdBaF56zehCcPbMKgPnIPJT0vfSX2CgiuJ5cZ1HHimRoaY3B2g1w==
accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model
accept-ch-lifetime: 4838400
alt-svc: h3=":443"; ma=86400
date: Mon, 02 Nov 2026 20:04:29 GMT
document-policy: force-load-at-top, include-js-call-stacks-in-crash-reports
origin-agent-cluster: ?1
report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7703667529190628731&cpp=C3&cv=1052682108&st=1793649869066"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7703667529190628731&cpp=C3&cv=1052682108&st=1793649869066", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
server-timing: slb_crtt;dur=9,slb_srtt;dur=-1,slb_req_start;dur=1793649869036073,slb_srv_hdr_rcvd;dur=52381,slb_cli_body_rcvd_first;dur=-1,slb_cli_body_rcvd_last;dur=-1,slb_conn_lat;dur=0,slb_ssl;dur=7,slb_rule_lat;dur=0
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=9, rtx=1, c=10, mss=1368, tbw=3271, tp=-1, tpl=-1, uplat=52, ullat=0
x-fb-debug: WZ74ywo15pxSQZzppzofgm9QINKE7yuSZGbdBaF56zehCcPbMKgPnIPJT0vfSX2CgiuJ5cZ1HHimRoaY3B2g1w==
Recommendations
Enable compression (gzip/brotli) to improve performance