HTTP Headers Analysis for https://api.thirdeyedesigninc.com

SSL Verification Bypassed

The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.

Reason:

Hostname Mismatch - certificate is issued for *.azurewebsites.net, *.scm.azurewebsites.net, *.sso.azurewebsites.net, *.eastus-01.azurewebsites.net, *.scm.eastus-01.azurewebsites.net, *.sso.eastus-01.azurewebsites.net, *.eastus.c.azurewebsites.net, *.scm.eastus.c.azurewebsites.net, *.sso.eastus.c.azurewebsites.net, not for api.thirdeyedesigninc.com

Open Cached · just now

9 Headers

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=2592000

Content-Security-Policy

Missing

Not configured

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

0 headers

No performance headers found

Caching Headers

0 headers

No caching headers found

Content Headers

1 headers

Content-Length

Content

Server Headers

2 headers

Server

Kestrel

X-Powered-By

Server

ASP.NET

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

ARRAffinitySameSite=997260270c326e2938e72fa9af69674fa8b4402f8e9e65121c461d08eb0abce6;Path=/;HttpOnly;SameSite=None;Secure;Domain=api.thirdeyedesigninc.com