HTTP Headers Analysis for https://chaseloveslocal.com

Detected Technologies from Headers

See all in URL Inspect 3

Akamai

AWS

Envoy

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Present

ch-ua-full-version-list=("https://*.chase.com"), ch-ua-platform-version=("https://*.chase.com"), ch-ua-arch=("https://*.chase.com"); +3 more

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

public, max-age=65

Etag

Caching

"14bxb5ziw5t6ion"

cache-control: public, max-age=65
etag: "14bxb5ziw5t6ion"

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

Access-Control-Allow-Origin

Cors

*

access-control-allow-origin: *

Cookies Headers

No cookies headers found

Other Headers

Accept-Ch

Other

Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64

Date

Other

Sat, 09 May 2026 13:48:08 GMT

Server-Timing

Other

cdn-cache; desc=HIT, edge; dur=29, origin; dur=0, ak_p; desc="1778334488341_389073030_1577861159_2872_8287_0_7_-";dur=1

X-Akamai-Transformed

Other

9 - 0 pmb=mRUM,2

X-Amzn-Trace-Id

Other

0.86c83017.1778334488.5e0c4027

X-B3-Traceid

Other

97214f34c264ec3d0a2835f6e946f654

X-Content-Security-Policy

Other

frame-ancestors 'none'

X-Dispatcher

Other

dispatcher5useast1-29633510

X-Envoy-Upstream-Service-Time

Other

60

accept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
date: Sat, 09 May 2026 13:48:08 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=29, origin; dur=0, ak_p; desc="1778334488341_389073030_1577861159_2872_8287_0_7_-";dur=1
x-akamai-transformed: 9 - 0 pmb=mRUM,2
x-amzn-trace-id: 0.86c83017.1778334488.5e0c4027
x-b3-traceid: 97214f34c264ec3d0a2835f6e946f654
x-content-security-policy: frame-ancestors 'none'
x-dispatcher: dispatcher5useast1-29633510
x-envoy-upstream-service-time: 60

Recommendations

Enable compression (gzip/brotli) to improve performance