HTTP Headers Analysis for https://analytics.distilnetworks.com

Detected Technologies from Headers

See all in URL Inspect 1

Nginx

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Basic

object-src; script-src; base-uri; +1 more Analyze

Content-Security-Policy-Report-Only

Weak

require-trusted-types-for; report-uri Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

Accept-Encoding

connection: close
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

no-store, must-revalidate

Expires

Caching

0

cache-control: no-store, must-revalidate
expires: 0

Content Headers

Content-Length

Content

881458

Content-Type

Content

text/html;charset=utf-8

content-length: 881458
content-type: text/html;charset=utf-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: XSRF-TOKEN=; max-age=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; secure; samesite=none
CSRF-TOKEN=fXKfMI-SWCEJ_HTxNWz312wh1ue87aKY8m9WCFzCfA4; path=/; secure; samesite=none
rack.session=BAh7CEkiD3Nlc3Npb25faWQGOgZFVG86HVJhY2s6OlNlc3Npb246OlNlc3Npb25JZAY6D0BwdWJsaWNfaWRJIkUwODZhZTY2MzkxNzY5ZGM0ZDllMjI1NDcxZGFkZDdhM2YxMTk4MmRiMjcwN2M2OTAxNGU5NGQ0Mjg1NGM3OTBkBjsARkkiD2NzcmYudG9rZW4GOwBUSSIwZlhLZk1JLVNXQ0VKX0hUeE5XejMxMndoMXVlODdhS1k4bTlXQ0Z6Q2ZBNAY7AEZJIg5fX0ZMQVNIX18GOwBGewA%3D--3d57ffae26ed3df554ead58e731ea5646cde5df8; path=/; expires=Wed, 14 Oct 2026 07:33:42 GMT; httponly; secure; samesite=none

Other Headers

Date

Other

Mon, 14 Sep 2026 07:33:42 GMT

P3p

Other

CP="This is not a P3P policy!"

Server-Timing

Other

server_latency;dur=22.698

Traceparent

Other

00-844a49696fff100401e83fb7b8b6cd10-f895cd4dfebc0205-00

X-Ua-Compatible

Other

IE=edge,chrome=1

date: Mon, 14 Sep 2026 07:33:42 GMT
p3p: CP="This is not a P3P policy!"
server-timing: server_latency;dur=22.698
traceparent: 00-844a49696fff100401e83fb7b8b6cd10-f895cd4dfebc0205-00
x-ua-compatible: IE=edge,chrome=1

Recommendations

Enable compression (gzip/brotli) to improve performance