HTTP Headers Analysis for https://api.qliro.dev

Detected Technologies from Headers

See all in URL Inspect 3

Apache

Debian

PHP

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

Accept-Encoding

connection: close
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

no-store, no-cache, must-revalidate

Expires

Caching

Thu, 19 Nov 1981 08:52:00 GMT

Pragma

Caching

no-cache

cache-control: no-store, no-cache, must-revalidate
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache

Content Headers

Content-Length

Content

7903

Content-Type

Content

text/html;charset=UTF-8

content-length: 7903
content-type: text/html;charset=UTF-8

Server Headers

Server

Apache/2.4.38 (Debian)

X-Powered-By

Server

PHP/7.4.2

server: Apache/2.4.38 (Debian)
x-powered-by: PHP/7.4.2

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: AWSALB=k9uFU0flLt3QBkMooX4ClM4p6Eb2lqgVwjJ+GhN1dm8Ao7w4UU3h3z0q0x1tf7jmSW9C+QwRYvwqjOE1G7qiOI1jID10GbtZJGw115gdc51Qg5iQddxc0oBMfvBL; Expires=Wed, 13 May 2026 15:16:19 GMT; Path=/
AWSALBCORS=k9uFU0flLt3QBkMooX4ClM4p6Eb2lqgVwjJ+GhN1dm8Ao7w4UU3h3z0q0x1tf7jmSW9C+QwRYvwqjOE1G7qiOI1jID10GbtZJGw115gdc51Qg5iQddxc0oBMfvBL; Expires=Wed, 13 May 2026 15:16:19 GMT; Path=/; SameSite=None; Secure
40d1b2d83998fabacb726e5bc3d22129=8d02e580169826e2556e75481a5181dc; path=/

Other Headers

Cockpit_duration_time

Other

0.004392147064209sec

Cockpit_loaded_files

Other

91

Cockpit_memory_usage

Other

0.56517791748047mb

Date

Other

Wed, 06 May 2026 15:16:19 GMT

cockpit_duration_time: 0.004392147064209sec
cockpit_loaded_files: 91
cockpit_memory_usage: 0.56517791748047mb
date: Wed, 06 May 2026 15:16:19 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology