HTTP Headers Analysis for https://analytics.macmms.com

Detected Technologies from Headers

See all in URL Inspect 1

Nginx

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Basic

object-src; script-src; base-uri; +1 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

Accept-Encoding

connection: close
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

no-store, must-revalidate

Expires

Caching

0

cache-control: no-store, must-revalidate
expires: 0

Content Headers

Content-Length

Content

790012

Content-Type

Content

text/html;charset=utf-8

content-length: 790012
content-type: text/html;charset=utf-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: XSRF-TOKEN=; max-age=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; secure; samesite=none
CSRF-TOKEN=3a4Lg3xSDK2TFhLviHQSLTW9BDUctyfgFcJxBl5fomY; path=/; secure; samesite=none
rack.session=BAh7CEkiD3Nlc3Npb25faWQGOgZFVG86HVJhY2s6OlNlc3Npb246OlNlc3Npb25JZAY6D0BwdWJsaWNfaWRJIkU3MmI0NmQwYjczNDg4YjVmYzZmMjE4ODY2NzYyMDRlYTFkYWFkNzU5MWVhNDI2NmRiNmZjMWU0OTRkMzA3Zjc2BjsARkkiD2NzcmYudG9rZW4GOwBUSSIwM2E0TGczeFNESzJURmhMdmlIUVNMVFc5QkRVY3R5ZmdGY0p4Qmw1Zm9tWQY7AEZJIg5fX0ZMQVNIX18GOwBGewA%3D--8b38a8ebe88a114429d016eef50c123d350ee9d6; path=/; httponly; secure; samesite=none

Other Headers

Date

Other

Tue, 12 May 2026 12:30:14 GMT

P3p

Other

CP="This is not a P3P policy!"

Server-Timing

Other

server_latency;dur=44.525

X-B3-Sampled

Other

0

X-B3-Spanid

Other

8926abb728d43a78

X-B3-Traceid

Other

e08fa69fb850463496a938b0ffe667bc

X-Ua-Compatible

Other

IE=edge,chrome=1

date: Tue, 12 May 2026 12:30:14 GMT
p3p: CP="This is not a P3P policy!"
server-timing: server_latency;dur=44.525
x-b3-sampled: 0
x-b3-spanid: 8926abb728d43a78
x-b3-traceid: e08fa69fb850463496a938b0ffe667bc
x-ua-compatible: IE=edge,chrome=1

Recommendations

Enable compression (gzip/brotli) to improve performance