Cached · just now
23 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=7884000 ; preload
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
ch-ua-model=*, ch-ua-platform-version=*, ch-ua=*; +6 more
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

Performance Headers

Connection
Performance
close, Transfer-Encoding
Transfer-Encoding
Performance
chunked

Caching Headers

Cache-Control
Caching
public, max-age=0
Etag
Caching
"476c2-EDzICwTgvrsHSHiTzxwxnzmLrrY"

Content Headers

Content-Type
Content
text/html; charset=utf-8

Server Headers

X-Powered-By
Server
Express

CORS Headers

Access-Control-Allow-Credentials
Cors
false
Access-Control-Allow-Headers
Cors
*
Access-Control-Allow-Methods
Cors
GET,HEAD,OPTIONS
Access-Control-Allow-Origin
Cors
*
Access-Control-Max-Age
Cors
86400

Cookies Headers

No cookies headers found

Other Headers

Accept-Ch
Other
Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness
Akamai-Grn
Other
0.8d6bdc17.1786694263.ac0fc9d
Date
Other
Fri, 14 Aug 2026 07:57:43 GMT
X-Cache-Hits
Other
0, 1
X-Debug-Backend
Other
default_origin
X-Debug-Url
Other
/outkick
X-Served-By
Other
cache-iad-kiad7000176-IAD, cache-iad-kiad7000176-IAD, cache-iad-khef600088-IAD
X-Timer
Other
S1786694263.252412,VS0,VE3

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology