HTTP Headers Analysis for https://apps.vanillastaging.com

Detected Technologies from Headers

See all in URL Inspect 1

Cloudflare CDN

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=15768000

Content-Security-Policy

Weak

object-src; base-uri; frame-ancestors Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Present

nosniff, nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding, Cookie

connection: close
transfer-encoding: chunked
vary: Accept-Encoding, Cookie

Caching Headers

Cache-Control

Caching

public, max-age=120

Expires

Caching

Tue, 15 Sep 2026 22:26:42 GMT

Last-Modified

Caching

Tue, 15 Sep 2026 22:24:42 GMT

cache-control: public, max-age=120
expires: Tue, 15 Sep 2026 22:26:42 GMT
last-modified: Tue, 15 Sep 2026 22:24:42 GMT

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: __cf_bm=KNeVi1SALdF5AR_qlc75bpjnotOxzDDSjgeclQ9qLfw-1789511081.849145-1.0.1.1-g_RRZOl0KOVxSC7FWYAp9Fu7u0Q5ZCWu9xO523KysPXatDvWChCx5K0RD.FtJd68u_IuMbGR9wgGeAZQcdRxTf5JJkhITe5tE5HoQ627rH8Az.tsbmN.0EAW2IEm9A8Y; HttpOnly; SameSite=None; Secure; Path=/; Domain=apps.vanillastaging.com; Expires=Tue, 15 Sep 2026 22:54:42 GMT
_cfuvid=NQB5YrPtajs2JSw5D2UerQZ5WSJzvi2cfEI9Cj_k2P0-1789511081.849145-1.0.1.1-6mpK4Ko3Z6aB7Ok1vECBxr.WnMUEI5QD7nN83.EDHfA; HttpOnly; SameSite=None; Secure; Path=/; Domain=apps.vanillastaging.com

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Cache-Status

Other

EXPIRED

Cf-Ray

Other

a3bb0b0588188ee2-IAD

Date

Other

Tue, 15 Sep 2026 22:24:42 GMT

P3p

Other

CP="CAO PSA OUR"

X-App

Other

fd5c15949cd92c70fdcd2bc1aff8564a5de01c0c/cl22001

X-Backend

Other

cl22001

X-Backend-Time

Other

2026-09-15T22:24:42Z

X-Lookup-Mode

Other

normal

X-Permitted-Cross-Domain-Policies

Other

master-only

X-Request-Id

Other

a3bb0b0588188ee2-YYZ

X-Vanilla-Version

Other

2026.016

alt-svc: h3=":443"; ma=86400
cf-cache-status: EXPIRED
cf-ray: a3bb0b0588188ee2-IAD
date: Tue, 15 Sep 2026 22:24:42 GMT
p3p: CP="CAO PSA OUR"
x-app: fd5c15949cd92c70fdcd2bc1aff8564a5de01c0c/cl22001
x-backend: cl22001
x-backend-time: 2026-09-15T22:24:42Z
x-lookup-mode: normal
x-permitted-cross-domain-policies: master-only
x-request-id: a3bb0b0588188ee2-YYZ
x-vanilla-version: 2026.016

Recommendations

Enable compression (gzip/brotli) to improve performance