Open
Cached
·
just now
17
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=86400 ; includeSubDomains
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close, Transfer-Encoding
Transfer-Encoding
chunked
connection: close, Transfer-Encoding transfer-encoding: chunked
Caching Headers
Cache-Control
public, max-age=3600, stale-while-revalidate=86400, stale-if-error=86400
cache-control: public, max-age=3600, stale-while-revalidate=86400, stale-if-error=86400
Content Headers
Content-Type
text/html; charset=utf-8
content-type: text/html; charset=utf-8
Server Headers
No server headers found
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Sat, 09 May 2026 05:44:09 GMT
X-Device-Viewport
desktop
X-Middleware-Request-X-Trace-Id
trace_1778304194573_wveclmn6
X-Rh-Edge-Alb-Dc
prod_catalog_mpp_aws_us_east_1
X-Rh-Edge-Cache-Status
Hit from child
X-Rh-Edge-Reference-Id
0.24714017.1778305449.114bf697
X-Rh-Edge-Request-Id
114bf697
X-Ssr-App-Code
CATA-003
X-Ssr-App-Release
b82cf755
X-Ssr-Deployed-On
2026-05-08T20:02:27+00:00
X-Ssr-Platform-Release
1.26.0
X-Trace-Id
trace_1778304194573_wveclmn6
date: Sat, 09 May 2026 05:44:09 GMT x-device-viewport: desktop x-middleware-request-x-trace-id: trace_1778304194573_wveclmn6 x-rh-edge-alb-dc: prod_catalog_mpp_aws_us_east_1 x-rh-edge-cache-status: Hit from child x-rh-edge-reference-id: 0.24714017.1778305449.114bf697 x-rh-edge-request-id: 114bf697 x-ssr-app-code: CATA-003 x-ssr-app-release: b82cf755 x-ssr-deployed-on: 2026-05-08T20:02:27+00:00 x-ssr-platform-release: 1.26.0 x-trace-id: trace_1778304194573_wveclmn6
Recommendations
Enable compression (gzip/brotli) to improve performance