HTTP Headers Analysis for https://adra.com

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Weak

frame-ancestors

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

accelerometer=(*),autoplay=(*),camera=(),display-capture=(),encrypted-media=(*),fullscreen=(*),gamepad=(),geolocation=(),gyroscope=(*),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(*),publickey-credentials-get=(),sync-xhr=(self),usb=(),screen-wake-lock=(),web-share=(),xr-spatial-tracking=()

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Significantly strengthen CSP directives

Performance Headers

3 headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding,Cookie

Caching Headers

1 headers

Cache-Control

Caching

max-age=600, must-revalidate

Content Headers

1 headers

Content-Type

Content

text/html; charset=UTF-8

Server Headers

2 headers

Server

cloudflare

X-Powered-By

Server

WP Engine

CORS Headers

0 headers

No CORS headers found

Cookies Headers

0 headers

No cookies headers found

Other Headers

7 headers

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

9b5a72724d913974-IAD

Date

Other

Mon, 29 Dec 2025 15:49:23 GMT

Link

Other

<https://www.trintech.com/?p=8264>; rel=shortlink

X-Cache

Other

X-Cache-Group

Other

normal

X-Cacheable

Other

SHORT

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology