26 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=2592000; includeSubDomains
Content-Security-Policy
Good
default-src
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer-when-downgrade
Permissions-Policy
Present
camera=(), geolocation=*, microphone=()
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Strengthen CSP by removing 'unsafe-eval'

Performance Headers

2 headers
Accept-Ranges
Performance
bytes
Connection
Performance
close

Caching Headers

5 headers
Age
Caching
0
Cache-Control
Caching
max-age=14400
Etag
Caching
"b783aaf08dfce3dee0138bad3089bcb3"
Expires
Caching
Sun, 18 Jan 2026 19:55:46 GMT
Last-Modified
Caching
Wed, 06 Aug 2025 20:45:33 GMT

Content Headers

2 headers
Content-Length
Content
28
Content-Type
Content
text/html

Server Headers

1 headers
Server
Server
UploadServer

CORS Headers

0 headers
No CORS headers found

Cookies Headers

0 headers
No cookies headers found

Other Headers

10 headers
Alt-Svc
Other
h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Date
Other
Sun, 18 Jan 2026 15:55:46 GMT
X-Goog-Generation
Other
1754513133350061
X-Goog-Hash
Other
md5=t4Oq8I38497gE4utMIm8sw==
X-Goog-Meta-Goog-Reserved-File-Mtime
Other
1754513113
X-Goog-Metageneration
Other
1
X-Goog-Storage-Class
Other
MULTI_REGIONAL
X-Goog-Stored-Content-Encoding
Other
identity
X-Goog-Stored-Content-Length
Other
28
X-Guploader-Uploadid
Other
AJRbA5VWmNZNsEgHNUAN4-dmiiPrMdsB9qVPkDPwllXzURMl2nSdM3WINBP7w2agsYLjMB9V3CyT1yU

Recommendations

Enable compression (gzip/brotli) to improve performance