HTTP Headers Analysis for https://app.shipcloud.io

Detected Technologies from Headers

See all in URL Inspect 3

Intercom

Nginx

Report URI

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains, max-age=63072000; includeSubdomains; preload

Content-Security-Policy

Basic

child-src; connect-src; default-src; +9 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Present

SAMEORIGIN, DENY

X-Content-Type-Options

Present

nosniff, nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

Origin

connection: close
vary: Origin

Caching Headers

Cache-Control

Caching

max-age=0, private, must-revalidate

Etag

Caching

W/"83b823a28412168fdd25bfb72275e171"

cache-control: max-age=0, private, must-revalidate
etag: W/"83b823a28412168fdd25bfb72275e171"

Content Headers

Content-Length

Content

8748

Content-Type

Content

text/html; charset=utf-8

content-length: 8748
content-type: text/html; charset=utf-8

Server Headers

Server

nginx

X-Runtime

Server

0.010607

server: nginx
x-runtime: 0.010607

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _shipcloud_session=qqItLp6U2BaILEwSgqS1YnBElPg7bXCG3QVolt9ttDLGZ34LDv5l%2FW5IiYR%2B82FbCdRsvW%2B%2FO0tBSkpxETMBtCirat%2FRJ0yuoTw6NuDp1c8qby5fWsuaWkT1ngf5%2BrIXwKVAGWGq1RsZ9uBqeS0YLTCOV2WuPhRJ1GOZcIf7C1SvN6zmF27mUaJ8gYF1Whm58mI7ISuXSwHU7gLLYyLMTQ%2FpMH0jyAhHH%2BPksguEu6hH%2BpU8IvBBL2STUovZEPFmViCRXARGIfBkA0qzJWdGqRn14wJuMvRnWtE%3D--cIa%2FiMtuwkCrkj7Q--4PYy6EXXT6SYqfI3Vuem5Q%3D%3D; path=/; secure; HttpOnly; SameSite=Lax

Other Headers

Date

Other

Sat, 09 May 2026 13:46:23 GMT

Link

Other

URL /assets/registration_application-0dbe87725155d853879a280d40d7e4caad30bd18d686fe9869bbfd1444846a62.css

rel=preload as=style nopush

URL /assets/bs_error_monitoring.min-d7a2520867e5c6544da70a3cc887c92c97d528fb391d8bb381de7e3f85d25385.js

rel=preload as=script nopush

URL /assets/full_application-af321d4cf0ec1c60cfc3af7e9cca72d28d95c590d49a3b598f3a041299b354c8.js

rel=preload as=script nopush

URL https://selfservice.billwerk.com/subscription.js

rel=preload as=script nopush

X-Permitted-Cross-Domain-Policies

Other

none

X-Request-Id

Other

5f65fcc9-9908-4400-b7fb-a318953dcb98

date: Sat, 09 May 2026 13:46:23 GMT
link: </assets/registration_application-0dbe87725155d853879a280d40d7e4caad30bd18d686fe9869bbfd1444846a62.css>; rel=preload; as=style; nopush,</assets/bs_error_monitoring.min-d7a2520867e5c6544da70a3cc887c92c97d528fb391d8bb381de7e3f85d25385.js>; rel=preload; as=script; nopush,</assets/full_application-af321d4cf0ec1c60cfc3af7e9cca72d28d95c590d49a3b598f3a041299b354c8.js>; rel=preload; as=script; nopush,<https://selfservice.billwerk.com/subscription.js>; rel=preload; as=script; nopush,</assets/pactas_itero-a6c8fb13d80912b0ef8091c50d507c6861d44f412be6edea8b610d55a2d7e825.js>; rel=preload; as=script; nopush,</assets/zendesk_widget_settings-591f9e93056c55657c3f5bf4682367b77bc3753a74ed4131eb78f49f1915300d.js>; rel=preload; as=script; nopush
x-permitted-cross-domain-policies: none
x-request-id: 5f65fcc9-9908-4400-b7fb-a318953dcb98

Recommendations

Enable compression (gzip/brotli) to improve performance