HTTP Headers Analysis for https://bulko.lk

Detected Technologies from Headers

See all in URL Inspect 2

LiteSpeed

PHP

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Keep-Alive

Performance

timeout=5, max=100

Vary

Performance

X-Inertia

connection: close
keep-alive: timeout=5, max=100
vary: X-Inertia

Caching Headers

Cache-Control

Caching

no-cache, private

cache-control: no-cache, private

Content Headers

Content-Length

Content

103048

Content-Type

Content

text/html; charset=UTF-8

content-length: 103048
content-type: text/html; charset=UTF-8

Server Headers

Server

LiteSpeed

X-Powered-By

Server

PHP/8.4.23

server: LiteSpeed
x-powered-by: PHP/8.4.23

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: XSRF-TOKEN=eyJpdiI6InVGZkN0VnFYSGFSYXBDZzFUenRrcEE9PSIsInZhbHVlIjoicjFYem9haVpTNHBnVlBBQkU4dFJ4Z1lJM0pjUjl1UkpQLzAxU3lncTJVelA2OEw1N3hxWWhQUXkzZGI4MUdTQ0lEN1VXM08vNFhSZWxZa0xJc3BZQnVJZk5SekNYaEpaczhuZ3BXM0tKRTMwc2wrYjgxWjVmWFBESFVyYUZWZmUiLCJtYWMiOiJiM2I1ZjVkYzVmNTMxNmI1Y2Q0NDg4OGQ5ZDc3M2YxNWZiZWVhOTU1MGVkMjIyODAzYTJiNDI4ODAwODNkNjYzIiwidGFnIjoiIn0%3D; expires=Sun, 16 Aug 2026 18:16:07 GMT; Max-Age=7200; path=/; secure; samesite=lax
bulko_session=eyJpdiI6IlJHclVHNUw0MDV0Vm9rKys0Mm50K2c9PSIsInZhbHVlIjoiMHROdy9tbU5nd2xnWTJYanVCaVhBSndQRUU3OVpVSTloZ2laSWhuSk10MFQ1TTVrRU1ZayswYmQ5K2w4cXpkc0JhcmlFeVRxdGRxTXJSTmd5VGpMWXRsRkoyZUEzaHg5VUd2SVNPN1NBQ01kWEhSYmRoa1JQZUduVFFZb3BnU3IiLCJtYWMiOiJkNTA5MzYwYjc1YWFiNGQ4MzRkM2JlNzI4YjcwZDE4MTlhYzFhNmE5YjE1NjgwOTc1MTZlZTIzOTk5YmJiOTA4IiwidGFnIjoiIn0%3D; expires=Sun, 16 Aug 2026 18:16:07 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax
guest_session_id=eyJpdiI6Ik1UU0pKVWNsU1V1NElmdjJDVmhPNVE9PSIsInZhbHVlIjoiZDFKdFBqcExyN1BUK1pFN0xoY3cxTXJzU3FiWjBPZy9EM2FsRjJ3dTFJK1BSOVF2U0dpaXViRWovZWNqWW1SVEYzT3BlbmxMc3Q5ZmpPSW41KytBNEV5UWYzNjNFbEJqb0d3N0MwSVVMWENKZTIzTWtsS1pxT1Fwam5Cci9xSlEiLCJtYWMiOiIwZGNkNWQwZTM0NTZjMzFiM2JkNTUzZTI2NTVlNDRlYjA2ZjI5YTliNGMwNmViMTg4YzE1OTFiNjJmMzFmMDRkIiwidGFnIjoiIn0%3D; expires=Sun, 23 Aug 2026 16:16:07 GMT; Max-Age=604800; path=/; secure; httponly; samesite=lax

Other Headers

Date

Other

Sun, 16 Aug 2026 16:16:07 GMT

X-Turbo-Charged-By

Other

LiteSpeed

date: Sun, 16 Aug 2026 16:16:07 GMT
x-turbo-charged-by: LiteSpeed

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology