HTTP Headers Analysis for https://511.alberta.ca

Detected Technologies from Headers

See all in URL Inspect 2

ASP.NET

AWS CloudFront

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

private

cache-control: private

Content Headers

Content-Length

Content

177648

Content-Type

Content

text/html; charset=utf-8

content-length: 177648
content-type: text/html; charset=utf-8

Server Headers

X-Powered-By

Server

ASP.NET

x-powered-by: ASP.NET

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: session-id=3C7FC878F21BD0C9751FB2E0A2FA1992D963B9D75E49BFB5DE700E468ADAAF27F7B0D52D2ECAEB599884933C756F62D0F29C19A582D6578175C5D5696A890F0340D82F327881631B4466802E62D79F2EB1251096DB070F42796019D46FC5EF37F0F320D51B1E68D2D7AEAE842D4DDB484BB8E0FB3D33AFCE1B58EB4855205D3E; path=/; secure; HttpOnly
_culture=en; expires=Sun, 09-May-2027 03:58:16 GMT; path=/; secure
session-id=3C7FC878F21BD0C9751FB2E0A2FA1992D963B9D75E49BFB5DE700E468ADAAF27F7B0D52D2ECAEB599884933C756F62D0F29C19A582D6578175C5D5696A890F0340D82F327881631B4466802E62D79F2EB1251096DB070F42796019D46FC5EF37F0F320D51B1E68D2D7AEAE842D4DDB484BB8E0FB3D33AFCE1B58EB4855205D3E; path=/; secure; HttpOnly
_culture=en; expires=Sun, 09-May-2027 03:58:16 GMT; path=/; secure
session=session; path=/; secure; HttpOnly
__RequestVerificationToken=O689WybnYihLltyfjDRu675dj1IhxOJJXhBm3o5CpRPfLlm6albTc7567T-TvDJCQbqZeBf0R2iBiBnCyzyiCXISF_o1; path=/; secure; HttpOnly

Other Headers

Date

Other

Sat, 09 May 2026 03:58:16 GMT

Via

Other

1.1 5f7eb39e021e91c3b4f1188abbe23720.cloudfront.net (CloudFront)

X-Amz-Cf-Id

Other

adbyC-x5HOAkjWeQk5MIxTx7YZkCA2gr02_e6Oz4natJw3DtFGEg4g==

X-Amz-Cf-Pop

Other

IAD61-P4

X-Cache

Other

Miss from cloudfront

date: Sat, 09 May 2026 03:58:16 GMT
via: 1.1 5f7eb39e021e91c3b4f1188abbe23720.cloudfront.net (CloudFront)
x-amz-cf-id: adbyC-x5HOAkjWeQk5MIxTx7YZkCA2gr02_e6Oz4natJw3DtFGEg4g==
x-amz-cf-pop: IAD61-P4
x-cache: Miss from cloudfront

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology