HTTP Headers Analysis for https://avg.ca

Detected Technologies from Headers

See all in URL Inspect 2

Akamai

Google Static File Front End

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store

Expires

Caching

Wed, 06 May 2026 16:47:27 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store
expires: Wed, 06 May 2026 16:47:27 GMT
pragma: no-cache

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

Google Frontend

server: Google Frontend

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: avgLocale=en-ca; Expires=Fri, 05-Jun-26 16:47:26 GMT; Domain=.avg.com; Path=/
apex__language=en; Domain=.avg.com; Path=/
apex__avgLocale=en-ca; Domain=.avg.com; Path=/
geoip=us; Expires=Fri, 05-Jun-26 16:47:26 GMT; Domain=.avg.com; Path=/
_nss=1; path=/; secure; HttpOnly; SameSite=Strict
gd_id=fe2fec14-2cf1-4104-b9e8-a8f4daceb413; Max-Age=63072000; Domain=.avg.com; Path=/; Secure; SameSite=Lax
gd_daily=fe2fec14-d40b-4104-8421-8bcd720f3378; Max-Age=86400; Domain=.avg.com; Path=/; Secure; SameSite=Lax

Other Headers

Date

Other

Wed, 06 May 2026 16:47:27 GMT

Server-Timing

Other

cdn-cache; desc=MISS, edge; dur=119, origin; dur=212, ak_p; desc="1778086046712_400320984_687011613_33123_23721_1_7_-";dur=1

Traceparent

Other

00-720ef3c1502a691a51d70a9cef9aefd6-87a28afd1a77537f-00

X-Akamai-Edgescape

Other

georegion=288,country_code=US,region_code=VA,city=ASHBURN,dma=511,pmsa=8840,msa=8872,areacode=703,county=LOUDOUN,fips=51107,lat=39.0438,long=-77.4879,timezone=EST,zip=20146-20149,continent=NA,throughput=vhigh,bw=5000,asnum=396356,location_id=0

X-Akamai-Transformed

Other

9 - 0 pmb=mRUM,1

X-Avg-Cookie-Expires

Other

Fri, 05-Jun-26 16:47:26 GMT

X-Avg-Country-Code

Other

us

X-Cloud-Trace-Context

Other

720ef3c1502a691a51d70a9cef9aefd6/9773526961022784383

X-Origin-Cache

Other

redman-prod-259-d5xf

X-Redman-Backend

Other

webcms

X-Redman-Final-Url

Other

www.avg.com/en-ca/homepage

date: Wed, 06 May 2026 16:47:27 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=119, origin; dur=212, ak_p; desc="1778086046712_400320984_687011613_33123_23721_1_7_-";dur=1
traceparent: 00-720ef3c1502a691a51d70a9cef9aefd6-87a28afd1a77537f-00
x-akamai-edgescape: georegion=288,country_code=US,region_code=VA,city=ASHBURN,dma=511,pmsa=8840,msa=8872,areacode=703,county=LOUDOUN,fips=51107,lat=39.0438,long=-77.4879,timezone=EST,zip=20146-20149,continent=NA,throughput=vhigh,bw=5000,asnum=396356,location_id=0
x-akamai-transformed: 9 - 0 pmb=mRUM,1
x-avg-cookie-expires: Fri, 05-Jun-26 16:47:26 GMT
x-avg-country-code: us
x-cloud-trace-context: 720ef3c1502a691a51d70a9cef9aefd6/9773526961022784383
x-origin-cache: redman-prod-259-d5xf
x-redman-backend: webcms
x-redman-final-url: www.avg.com/en-ca/homepage

Recommendations

Enable compression (gzip/brotli) to improve performance