Open
Cached
·
just now
23
Headers
Detected Technologies from Headers
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31536000, max-age=63072000, max-age=31536000; includeSubDomains; preload
X-Frame-Options
Present
SAMEORIGIN, SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
strict-origin-when-cross-origin, no-referrer
Permissions-Policy
Present
geolocation=(), microphone=(), camera=(); +1 more
Recommendations
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
Performance Headers
Connection
close
Vary
Cookie,Accept-Encoding
connection: close vary: Cookie,Accept-Encoding
Caching Headers
Cache-Control
max-age=86400, public
Etag
"1771574592"
Expires
Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified
Fri, 20 Feb 2026 08:03:12 GMT
cache-control: max-age=86400, public etag: "1771574592" expires: Sun, 19 Nov 1978 05:00:00 GMT last-modified: Fri, 20 Feb 2026 08:03:12 GMT
Content Headers
Content-Language
en-gb
Content-Length
125953
Content-Type
text/html; charset=UTF-8
content-language: en-gb content-length: 125953 content-type: text/html; charset=UTF-8
Server Headers
Server
bws
X-Powered-By
PHP/8.3.30
server: bws x-powered-by: PHP/8.3.30
CORS Headers
Access-Control-Allow-Origin
*
access-control-allow-origin: *
Cookies Headers
Other Headers
Date
Sat, 21 Feb 2026 04:47:05 GMT
X-Drupal-Cache
HIT
X-Drupal-Dynamic-Cache
HIT
X-Generator
Drupal 11 (https://www.drupal.org)
date: Sat, 21 Feb 2026 04:47:05 GMT x-drupal-cache: HIT x-drupal-dynamic-cache: HIT x-generator: Drupal 11 (https://www.drupal.org)
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology