HTTP Headers Analysis for https://belmondsafaris.com

Detected Technologies from Headers

See all in URL Inspect 2

Akamai Active incidents

Nginx

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=15780000;

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

max-age=86400

Etag

Caching

W/"kiEov7f1Yc"

Last-Modified

Caching

Sun, 16 Aug 2026 07:51:53 GMT

cache-control: max-age=86400
etag: W/"kiEov7f1Yc"
last-modified: Sun, 16 Aug 2026 07:51:53 GMT

Content Headers

Content-Type

Content

text/html;charset=utf-8

content-type: text/html;charset=utf-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _abck=D7C040AF9E479B09354B644FEC157ADF~-1~YAAQmQwDF1vqzN2fAQAAw3+0DBC8NwzuWtzwzKXhOOWNicEdctAm4IWH7aUl272cZU4XtvojoU9+rGEEszRIll33t0COOO2RIP8Jq2I7VdDHAoVb81MwKq5dyRAdvzZQdUJFj8jjo9VOyIkoT4anpwDNrvxlSaQT7qrPbicFNi9dMzY0yfBbdX86nUxw9uIKKosLCbP7rAuNA9zky9fJnfTvIDRZihB8jUfJ7Z2E5GonNUze95blhoCGbloXl/F9I1b9aBXLAfi0Edi58Jg6ulypNVZEeU9VnT8N7VcVM7ieyXkZWaUHQ1FQrvxFTsmMeYNC/tMLpVQFo6BtLraejun/CLo2mCCggUBtdBqRmK+Xrt331Z8U5lQhFc0P1E33tKgm6KmOY+f81dCD4trlClXk0SfZaChVqZ60W4hpFJaPZNuodJZ8/R4sZ4Lj1aMWwM05VbGNlh2afjbeC+g=~-1~-1~-1~-1~-1; Domain=.belmond.com; Path=/; Expires=Mon, 16 Aug 2027 22:32:30 GMT; Max-Age=31536000; SameSite=None; Secure
bm_sz=429290CC5070CFD40AD3E3ED215BD746~YAAQmQwDF1zqzN2fAQAAw3+0DAAAdcOfwMDpMvWGjFuCNAFPy9IPrZINOiQl1qvvPK9rz80oF+BAubk5Z1HglLg+dhGH/GWel0BnDF7a3nIvWU9uQOYn5xo5dmOJnLbQ4guMvnaSg2pid4eiVTjWtHQ4PgMsxU/2zQsIkcnrsKJDFZrh6FheMjOA4vhYTZoI5LsQw5+ZR2ofNTN4LWKJGf+PPDRgwyS+mP1/dqdG4BkXi8qBU5yBXWMYDhPeE6NwBkwFMZ5U9/cJC88U121AOmVXEKhmGRCyjn/4fsngqdbZysHawNULdzI30MzyQ3Dwb58/8DTZm2tKwE4C/Ey7mEpZSoG54vA7NsI03T5qmfSQJd4tkcjc~4534598~3687746; Domain=.belmond.com; Path=/; Expires=Mon, 17 Aug 2026 02:32:30 GMT; Max-Age=14400; SameSite=None; Secure

Other Headers

Date

Other

Sun, 16 Aug 2026 22:32:30 GMT

Server-Timing

Other

cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1786919550801_386075801_1729352183_39_9087_1_78_-";dur=1

X-Akamai-Transformed

Other

9 - 0 pmb=mRUM,2

date: Sun, 16 Aug 2026 22:32:30 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1786919550801_386075801_1729352183_39_9087_1_78_-";dur=1
x-akamai-transformed: 9 - 0 pmb=mRUM,2

Recommendations

Enable compression (gzip/brotli) to improve performance