DNS Gurus
Cached · just now
19 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Good
max-age=63072000; includeSubDomains
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
  • • Consider adding 'preload' to HSTS for maximum security
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Consider adding Permissions-Policy to control browser features

Performance Headers

2 headers
Connection
Performance
close
Transfer-Encoding
Performance
chunked

Caching Headers

2 headers
Cache-Control
Caching
max-age=0, private, must-revalidate
Etag
Caching
W/"8c20c84e029e57aa4af632b529160a3d"

Content Headers

1 headers
Content-Type
Content
text/html; charset=utf-8

Server Headers

3 headers
Server
Server
nginx/1.24.0 + Phusion Passenger(R) 6.1.1
X-Powered-By
Server
Phusion Passenger(R) 6.1.1
X-Runtime
Server
0.003116

CORS Headers

0 headers
No CORS headers found

Cookies Headers

1 headers
Set-Cookie
Cookies
_xformer_crm_session=foCnH700ettFYeohnh%2F1VFxZySXTtPGcgY6CFowZSNMqb6PVeDaJDAj1dbf%2Fi6v3543yc7HN48enBUiQLFQGEExmQwLlXx6geKeCW3D7Zz%2FSQZNPeCCEAdUdhIK8HIQx%2B%2Bz3oeyCgLGNr9eEd3uJdmvzd0Sbd3iOrqfIV7zeThbPRFHOm0Q%2FozeibjR8K11msdBESpAA8eLcHaAuk9xujvKYsNGUMEWwqXwFfu3ezlK5sZQaNsJ3PqFklHpTJo6tamiiiBWIYZ32WgjtlIZtWMzg%2BLG2QaIfx1nidA%3D%3D--8p4OZezRoQbl6Nbf--LKX2RSKUDFcWq6cTrYWEmw%3D%3D; path=/; secure; HttpOnly; SameSite=Lax

Other Headers

5 headers
Date
Other
Sun, 01 Feb 2026 04:56:19 GMT
Link
Other
</assets/application-25aacc8c4f9f5e9f834aef54258759e3b0f1109ab7d89b70d694d95180ad9f54.css>; rel=preload; as=style; nopush
Status
Other
200 OK
X-Permitted-Cross-Domain-Policies
Other
none
X-Request-Id
Other
ccbd9700-9e1e-473f-95df-f42e64ee8323

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology