35 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=63113904; includeSubDomains; preload
Content-Security-Policy
Basic
base-uri; frame-ancestors; connect-src; +8 more
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Consider adding Permissions-Policy to control browser features

Performance Headers

1 headers
Connection
Performance
close

Caching Headers

1 headers
Cache-Control
Caching
no-cache

Content Headers

2 headers
Content-Length
Content
27
Content-Type
Content
text/html; charset=utf-8

Server Headers

2 headers
Server
Server
BunnyCDN-ASB1-925
X-Runtime
Server
0.018371

CORS Headers

0 headers
No CORS headers found

Cookies Headers

0 headers
No cookies headers found

Other Headers

24 headers
Cdn-Cache
Other
MISS
Cdn-Cachedat
Other
12/02/2025 17:30:10
Cdn-Edgestorageid
Other
925
Cdn-Proxyver
Other
1.41
Cdn-Pullzone
Other
4491959
Cdn-Requestcountrycode
Other
US
Cdn-Requestid
Other
6ad968048f43b630eac8614a83994cd4
Cdn-Requestpullcode
Other
401
Cdn-Requestpullsuccess
Other
True
Cdn-Requesttime
Other
0
Cdn-Status
Other
401
Cf-Cache-Status
Other
BYPASS
Cf-Ray
Other
9a7c8cf5ca3fa5b8-IAD
Cross-Origin-Embedder-Policy-Report-Only
Other
require-corp; report-to csp-endpoint
Cross-Origin-Opener-Policy-Report-Only
Other
same-origin; report-to csp-endpoint
Date
Other
Tue, 02 Dec 2025 17:30:10 GMT
Feature-Policy
Other
accelerometer 'none'; autoplay 'none'; camera 'none'; encrypted-media 'none'; fullscreen 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture 'none'; usb 'none'
Nel
Other
{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Report-To
Other
{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=zIA8N8ZIhN0p0ma58Y0h%2Bt%2FZOkCAxceA%2Fi343Pu6NggxglbQhMAVXYcDDwio8gkz%2Bw96B0s2cpddspmdfVJGmi2ysc4rX8C5mt%2Fl4Z2GjQ%3D%3D"}]}
Reporting-Endpoints
Other
csp-endpoint="https://in.logs.betterstack.com?source_token=9Vx9Vgtf6qiwSK1DV7c8s5iA"
Server-Timing
Other
cfEdge;dur=17,cfOrigin;dur=466
Www-Authenticate
Other
Basic realm="Application"
X-Permitted-Cross-Domain-Policies
Other
none
X-Request-Id
Other
a420c0a9-ec53-49e8-8977-5b3931a79811

Recommendations

Enable compression (gzip/brotli) to improve performance

Analysis completed in 884ms