Open
Cached
·
just now
12
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Accept-Ranges
bytes
Connection
close
accept-ranges: bytes connection: close
Caching Headers
Etag
"1dcc0ff3acd5299"
Last-Modified
Tue, 31 Mar 2026 11:12:15 GMT
etag: "1dcc0ff3acd5299" last-modified: Tue, 31 Mar 2026 11:12:15 GMT
Content Headers
Content-Length
793
Content-Type
text/html
content-length: 793 content-type: text/html
Server Headers
No server headers found
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Client-Request-Id
4b224d37-f14e-4334-bf9c-f38e9b3c5fba
Date
Thu, 09 Apr 2026 03:29:52 GMT
X-Ms-Correlation-Id
70772942-e159-4c89-bae7-f9e3701c7820
X-Ms-Gateway-Requestid
51cda73f-64ab-42c4-9882-a0a13c857a10
X-Ms-Mysignins-Region
eastus
client-request-id: 4b224d37-f14e-4334-bf9c-f38e9b3c5fba date: Thu, 09 Apr 2026 03:29:52 GMT x-ms-correlation-id: 70772942-e159-4c89-bae7-f9e3701c7820 x-ms-gateway-requestid: 51cda73f-64ab-42c4-9882-a0a13c857a10 x-ms-mysignins-region: eastus
Recommendations
Enable compression (gzip/brotli) to improve performance
Add Cache-Control header to optimize caching