26 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=15552000; preload
Content-Security-Policy
Basic
default-src; script-src; style-src; +11 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
accelerometer=(), attribution-reporting=(self), autoplay=(); +45 more
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

Performance Headers

Connection
Performance
close
Transfer-Encoding
Performance
chunked
Vary
Performance
Accept-Encoding

Caching Headers

Cache-Control
Caching
private, no-cache, no-store, must-revalidate
Expires
Caching
Sat, 01 Jan 2000 00:00:00 GMT
Pragma
Caching
no-cache

Content Headers

Content-Type
Content
text/html; charset="utf-8"

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie
Cookies

Other Headers

Accept-Ch
Other
viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model
Accept-Ch-Lifetime
Other
4838400
Alt-Svc
Other
h3=":443"; ma=86400
Date
Other
Mon, 06 Apr 2026 10:27:53 GMT
Document-Policy
Other
force-load-at-top, include-js-call-stacks-in-crash-reports
Origin-Agent-Cluster
Other
?1
Reporting-Endpoints
Other
coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7625591054202315264&cpp=C3&cv=1036711911&st=1775471273570", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
X-Fb-Connection-Quality
Other
GOOD; q=0.7, rtt=56, rtx=0, c=10, mss=1368, tbw=3272, tp=-1, tpl=-1, uplat=61, ullat=0
X-Fb-Debug
Other
gARW6V96BH3p/ZUOFf/lKKdGYZ3PJV7iuTxPzT1hsYqZyom71pSyOBdTj6/4hN2QUbshU9cs4XYW4diO4SYV4g==

Recommendations

Enable compression (gzip/brotli) to improve performance