23 Headers

Detected Technologies from Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556952
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

Performance Headers

Connection
Performance
close
Transfer-Encoding
Performance
chunked
Vary
Performance
Accept-Encoding

Caching Headers

Age
Caching
317151
Cache-Control
Caching
public,max-age=0,must-revalidate
Etag
Caching
W/"8dcbff42285df60c08838301f3e509bf"

Content Headers

Content-Language
Content
en
Content-Type
Content
text/html; charset=UTF-8

Server Headers

Server
Server
cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie
Cookies

Other Headers

Alt-Svc
Other
h3=":443"; ma=86400
Cf-Cache-Status
Other
DYNAMIC
Cf-Ray
Other
a3980c4e88292913-IAD
Date
Other
Fri, 11 Sep 2026 16:28:52 GMT
Link
Other
Server-Timing
Other
cache;desc=miss, varnish;desc=miss_hit, dc;desc=fastly_cf
X-Cache
Other
HIT
X-Cache-Status
Other
MISS
X-Seen-By
Other
bQAXdg/f3pWGCb3VI6q72A==,Ct40diYObxC+je8ScvxEPQ==,oDbbMvfdXCdtsgjD2KgaM8iHE4dbw+wewoJ5nvKoyjE=,vmPhUNXuQemvc7fjBI8NWewfbs+7qUVAqsIx00yI78k=,Ua1iSBCTq7qSXjmRCGE1N/QWGoA98Skd6XG4QTc0FT28P6kEvFG1o3hMqpHadLLyEpzrUii78VdYxnNKzUeyUYhIydfYCelFDfkrvUteY3iMPaj4LZMbFpzqoQ17pkqt,2d58ifebGbosy5xc+FRall1lxeS+s9PwmAvk6zDkhauFKfTkr4qB+sZRko/4yKS2qdB/muy8W4xVdZyKL0M+VB+QmoTduQy303KBw2INeI0=,2UNV7KOq4oGjA5+PKsX47KEA/q0qujTnFdLk61L10h4FVd1lR1L8/yRoc88kq/ej,2UNV7KOq4oGjA5+PKsX47FtSaLg8IYZ7tWb3E4MS5QwFVd1lR1L8/yRoc88kq/ej,/B3VgDtICCNDWQOEWfZmMl6Ggo8g/W2BBED68rvqXi0=,wjXkXN74v+Dcwxj+Ualvvnnti+Tmcr8g5zTaJzJ3DCwj6r0AZAMucqm4C7kwBEyavRvZBY6+AsorMey6PvaN6Q==,/B3VgDtICCNDWQOEWfZmMm52tW/FaBOrIRKsGhFnkcg=,LoUK8/saGAmOxZWtpubo2kD4pg0+gDMifLeRlJYA1go1sJhXvOwF2BBTqrA+k7nt0kJ5hIDFU0fEwO5yGxa+4FO02Fr1CqG0HW3vRNOeGe6NVx5GG7+uz8CVLgHLbW3J,/B3VgDtICCNDWQOEWfZmMlQ0QG3wsPrj/8hltD43UQo=,/a5ccLSK1HEmwPNg/x6Oujt8v2OwQq1MuIm479Vgkb80W0GPMnSI/0OvkkuJv5mg6PqjwUetb1BCX0Ii4zMD+eNU3qyb7xpGmRnbLzsPhyBw5fVdGcLzclHNyPAxgJF8
X-Served-By
Other
cache-iad-kcgs7200031-IAD
X-Wix-Request-Id
Other
1789144132.894743930809282034

Recommendations

Enable compression (gzip/brotli) to improve performance