HTTP Headers Analysis for https://checkcoverage.apple.com

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000; includeSubdomains

Content-Security-Policy

Basic

frame-ancestors; connect-src; default-src; +5 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Present

nosniff, nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

Vary

Performance

rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch

connection: close, Transfer-Encoding
transfer-encoding: chunked
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch

Caching Headers

Cache-Control

Caching

no-store, max-age=0, must-revalidate

Expires

Caching

0

Pragma

Caching

no-cache

cache-control: no-store, max-age=0, must-revalidate
expires: 0
pragma: no-cache

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

Apple

server: Apple

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: route=1777680600.906.23.739125|8cde43f945d9b64d13b342ad91e6fd80; Expires=Mon, 04-May-26 00:09:59 GMT; Max-Age=172800; Path=/; Secure; HttpOnly
cclocale=en_US; Path=/; Expires=Sat, 02 May 2026 01:09:59 GMT; Max-Age=3600; Secure; HttpOnly; SameSite=strict
ccAuthToken=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJkYXRhIjoid2ZrcDRBK3o5RkU1Y1JLdXk2YXlIRGVvM1BjYlVMTW8xRDFXYmc3a2hSZG52TXVjK0EvajRvYWVkNTJ6TFFyRGlqK1ZUWUhjVFowVSttSDNJWWxiWnRkenNNRnpZdEVzWmcyQUpUVWJJRFN0WFBBeEVVTU95OW5ITGRjVDFrN3QiLCJpYXQiOjE3Nzc2ODA1OTksImV4cCI6MTc3NzY4NDE5OX0.mgcXT6b26mBr0xNqKSua30vDAvvc16u5assVr30dcwY; Path=/; Expires=Sat, 02 May 2026 01:09:59 GMT; Max-Age=3600; Secure; HttpOnly; SameSite=strict
CCW_AFFINITY=awsuse1-1;path=/;httponly;secure
CC_AFFINITY=;max-age=-1;path=/;httponly;secure;

Other Headers

Date

Other

Sat, 02 May 2026 00:09:59 GMT

Link

Other

URL /_next/static/css/3ad257a547cda4dd.css

rel=preload as=style

URL /_next/static/css/354bc0765e179c4e.css

rel=preload as=style

URL /_next/static/css/e5a63645e0facc55.css

rel=preload as=style

URL /_next/static/css/0ab36594bd66c426.css

rel=preload as=style

URL /_next/static/css/3ad257a547cda4dd.css

rel=preload as=style

URL /_next/static/css/354bc0765e179c4e.css

rel=preload as=style

URL /_next/static/css/e5a63645e0facc55.css

rel=preload as=style

URL /_next/static/css/0ab36594bd66c426.css

rel=preload as=style

URL /_next/static/css/e949898ae242f2f0.css

rel=preload as=style

URL /_next/static/css/7e460521fae559f5.css

rel=preload as=style

URL /_next/static/css/790ebdec11ac9b95.css

rel=preload as=style

URL /_next/static/css/c14acce65df6bc03.css

rel=preload as=style

URL /_next/static/css/2b662f00c85607b6.css

rel=preload as=style

URL /_next/static/css/696a2023c19081e5.css

rel=preload as=style

URL /_next/static/css/a73e4c50195437c2.css

rel=preload as=style

URL /_next/static/css/8393e204f3976dcf.css

rel=preload as=style

X-Apple-Txn-Id

Other

ee44aa49284640fab38d5319dfb17e41

X-Worker-Pid

Other

38

date: Sat, 02 May 2026 00:09:59 GMT
link: </_next/static/css/3ad257a547cda4dd.css>; rel=preload; as="style", </_next/static/css/354bc0765e179c4e.css>; rel=preload; as="style", </_next/static/css/e5a63645e0facc55.css>; rel=preload; as="style", </_next/static/css/0ab36594bd66c426.css>; rel=preload; as="style", </_next/static/css/e949898ae242f2f0.css>; rel=preload; as="style", </_next/static/css/7e460521fae559f5.css>; rel=preload; as="style", </_next/static/css/790ebdec11ac9b95.css>; rel=preload; as="style", </_next/static/css/c14acce65df6bc03.css>; rel=preload; as="style", </_next/static/css/2b662f00c85607b6.css>; rel=preload; as="style", </_next/static/css/696a2023c19081e5.css>; rel=preload; as="style", </_next/static/css/a73e4c50195437c2.css>; rel=preload; as="style", </_next/static/css/8393e204f3976dcf.css>; rel=preload; as="style"
x-apple-txn-id: ee44aa49284640fab38d5319dfb17e41
x-worker-pid: 38

Recommendations

Enable compression (gzip/brotli) to improve performance