26 Headers

Detected Technologies from Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Good
default-src; script-src; style-src; +5 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
microphone=()
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Strengthen CSP by removing 'unsafe-eval'

Performance Headers

Connection
Performance
close

Caching Headers

Cache-Control
Caching
no-store, no-cache, must-revalidate
Etag
Caching
W/"5d-49qM3h0i1PJBZOM9b5q2jAv4734:dtagent10343260715123811i+8X"
Expires
Caching
0
Pragma
Caching
no-cache

Content Headers

Content-Length
Content
93
Content-Type
Content
application/json; charset=utf-8

Server Headers

No server headers found

CORS Headers

Access-Control-Allow-Origin
Cors
*

Cookies Headers

Set-Cookie
Cookies

Other Headers

Date
Other
Mon, 07 Sep 2026 20:47:54 GMT
Origin-Agent-Cluster
Other
?1
Server-Timing
Other
dtTrId;desc="a53236375016b40e32df6de902ba014c", dtSInfo;desc="0", dtRpid;desc="-89435087"
X-Cdn
Other
Imperva
X-Dns-Prefetch-Control
Other
off
X-Download-Options
Other
noopen
X-Iinfo
Other
52-13484749-13484754 NNNN CT(223 450 0) RT(1788814073760 16) q(0 0 7 3) r(9 9) U11
X-Permitted-Cross-Domain-Policies
Other
none

Recommendations

Enable compression (gzip/brotli) to improve performance