HTTP Headers Analysis for https://analytics.plentific.com

Detected Technologies from Headers

See all in URL Inspect 1

Nginx

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Basic

object-src; script-src; base-uri; +1 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

Accept-Encoding

connection: close
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

no-store, must-revalidate

Expires

Caching

0

cache-control: no-store, must-revalidate
expires: 0

Content Headers

Content-Length

Content

795492

Content-Type

Content

text/html;charset=utf-8

content-length: 795492
content-type: text/html;charset=utf-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: XSRF-TOKEN=; max-age=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; secure; samesite=none
CSRF-TOKEN=_v4s3k_870NHkg5k09TCWcF3yZTLw2nLjdtrwAAMcC8; path=/; secure; samesite=none
rack.session=BAh7CEkiD3Nlc3Npb25faWQGOgZFVG86HVJhY2s6OlNlc3Npb246OlNlc3Npb25JZAY6D0BwdWJsaWNfaWRJIkU1ZWNhYTYxNDllNGEwNzM2MDMzYmM5YWViMmNiMzdjNmUwNGJmMTI2NDQyY2Q1NTQ1ZjljNDc5YmMzYjA3MWQxBjsARkkiD2NzcmYudG9rZW4GOwBUSSIwX3Y0czNrXzg3ME5Ia2c1azA5VENXY0YzeVpUTHcybkxqZHRyd0FBTWNDOAY7AEZJIg5fX0ZMQVNIX18GOwBGewA%3D--0697d5f94d59e7039627c4b5df90a625d86aeeba; path=/; httponly; secure; samesite=none

Other Headers

Date

Other

Mon, 04 May 2026 06:14:59 GMT

P3p

Other

CP="This is not a P3P policy!"

Server-Timing

Other

server_latency;dur=25.044

Traceparent

Other

00-c2531b052307a696703a13b15510bc48-558691786a7b8660-00

X-Ua-Compatible

Other

IE=edge,chrome=1

date: Mon, 04 May 2026 06:14:59 GMT
p3p: CP="This is not a P3P policy!"
server-timing: server_latency;dur=25.044
traceparent: 00-c2531b052307a696703a13b15510bc48-558691786a7b8660-00
x-ua-compatible: IE=edge,chrome=1

Recommendations

Enable compression (gzip/brotli) to improve performance