HTTP Headers Analysis for https://charitreks.com

Detected Technologies from Headers

See all in URL Inspect 11

Cloudflare NEL Monitoring

PayPal

Adobe Fonts (Typekit)

AWS

Amazon S3

Cloudflare CDN

Cloudflare CDNJS

Google Analytics

Google Fonts

Mailjet

Stripe

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=15552000; includeSubDomains, max-age=15724800; includeSubdomains

Content-Security-Policy

Good

default-src; img-src; script-src; +5 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Strengthen CSP by removing 'unsafe-eval'
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

Accept-Encoding

connection: close
vary: Accept-Encoding

Caching Headers

Etag

Caching

W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"

etag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"

Content Headers

Content-Length

Content

2

Content-Type

Content

application/json; charset=utf-8

content-length: 2
content-type: application/json; charset=utf-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: s=s%3A9kiNQINXCeWbM2tZdgYRb7GvPAsZLLzu.MBC%2FeeKd0rnSGsOrH7OZLR31unlnARy9YUwo5bYFByA; Path=/; Expires=Thu, 07 May 2026 02:46:51 GMT; HttpOnly; Secure

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

9f74a827695e2423-IAD

Date

Other

Wed, 06 May 2026 02:46:51 GMT

Nel

Other

Report-To Group cf-nel max-age: 1w

success: 0.0%

Report-To

Other

Group cf-nel max-age: 1w

Endpoint 1 https://a.nel.cloudflare.com/report/v4?s=m92ZVcKo4El71EDTG8dV82abrYozv9hMmdgW4YmyoMy57vFs0BaK5fjnpmNdumTFTdaknsfYNFMlkh5Z562LQHKXhFNZldHE4y93RsXVNLg5HaShS4Fop0dFARXDApG1

Server-Timing

Other

cfCacheStatus;desc="DYNAMIC", cfEdge;dur=15,cfOrigin;dur=384

X-Dns-Prefetch-Control

Other

off

X-Download-Options

Other

noopen

X-Permitted-Cross-Domain-Policies

Other

none

alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
cf-ray: 9f74a827695e2423-IAD
date: Wed, 06 May 2026 02:46:51 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=m92ZVcKo4El71EDTG8dV82abrYozv9hMmdgW4YmyoMy57vFs0BaK5fjnpmNdumTFTdaknsfYNFMlkh5Z562LQHKXhFNZldHE4y93RsXVNLg5HaShS4Fop0dFARXDApG1"}]}
server-timing: cfCacheStatus;desc="DYNAMIC", cfEdge;dur=15,cfOrigin;dur=384
x-dns-prefetch-control: off
x-download-options: noopen
x-permitted-cross-domain-policies: none

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching