Open
Cached
·
just now
11
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
connection: close
Caching Headers
Etag
"616ed266-36"
etag: "616ed266-36"
Content Headers
Content-Length
54
Content-Type
application/json
content-length: 54 content-type: application/json
Server Headers
Server
kittenx
server: kittenx
CORS Headers
Access-Control-Expose-Headers
X-Frontend
access-control-expose-headers: X-Frontend
Cookies Headers
Other Headers
Date
Wed, 25 Feb 2026 10:34:40 GMT
Server-Timing
tid;desc="6HF4oJlbp2QJEioiSTFbY43ujriZhg",front;dur=0.200
X-Frontend
front923402
X-Trace-Id
6HF4oJlbp2QJEioiSTFbY43ujriZhg
X-Trace-Id-V2
019c945d7a367f7abb7c9ad814c220c3
date: Wed, 25 Feb 2026 10:34:40 GMT server-timing: tid;desc="6HF4oJlbp2QJEioiSTFbY43ujriZhg",front;dur=0.200 x-frontend: front923402 x-trace-id: 6HF4oJlbp2QJEioiSTFbY43ujriZhg x-trace-id-v2: 019c945d7a367f7abb7c9ad814c220c3
Recommendations
Enable compression (gzip/brotli) to improve performance
Add Cache-Control header to optimize caching