19 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

Performance Headers

Connection
Performance
close
Vary
Performance
Accept-Encoding

Caching Headers

Cache-Control
Caching
must-revalidate, no-cache, private
Expires
Caching
Sun, 19 Nov 1978 05:00:00 GMT

Content Headers

Content-Language
Content
en
Content-Length
Content
77486
Content-Type
Content
text/html; charset=UTF-8

Server Headers

Server
Server
nginx
X-Powered-By
Server
PHP/8.3.33, PleskLin

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Date
Other
Sun, 16 Aug 2026 22:29:41 GMT
X-Commerce-Core
Other
3
X-Drupal-Cache
Other
HIT
X-Drupal-Cache-Contexts
Other
cookies:big_pipe_nojs languages:language_interface layout_builder_is_active:node route session.exists theme timezone url.path url.query_args url.site user.permissions user.roles
X-Drupal-Cache-Max-Age
Other
0 (Uncacheable)
X-Drupal-Cache-Tags
Other
CACHE_MISS_IF_UNCACHEABLE_HTTP_METHOD:form block_content:16 block_content:17 block_content:18 block_view config:block.block.breadcrumbs config:block.block.exposedformsearch_resultssearch_results_page config:block.block.fruity_account_menu config:block.block.fruity_branding config:block.block.fruity_content config:block.block.fruity_help config:block.block.fruity_local_actions config:block.block.fruity_local_tasks config:block.block.fruity_messages config:block.block.fruity_page_title config:block.block.fruity_tools config:block.block.legrandfooterlinks config:block.block.legrandfootersocial config:block.block.legrandheaderlinks config:block.block.legrandsocials config:block.block.mainmenu config:block.block.search_form config:block_list config:capi.settings config:core.entity_form_display.webform_submission.search_form.add config:system.menu.main-menu config:system.site config:user.role.anonymous config:webform.settings config:webform.webform.search_form http_response local_task node:140 node:18 node:569 node:582 node:584 node:587 node:591 node:592 node:595 node:598 node:618 node:619 node:620 node:622 node:625 node:626 node:627 node:628 node:629 node:630 node:631 node:633 node:634 node:635 node:640 node:644 node:647 node:648 node:649 node:650 node:651 node:652 node:653 node:654 node:655 node:656 node:657 node:658 node:659 node:660 node:661 node:662 node:663 node:664 node:666 node:667 node:670 node:671 node:673 node:675 node:679 node:681 node:682 node:683 node:687 node:688 node:689 node:691 node:692 node:709 node:710 node:711 node:718 node:719 node:723 node:739 node:781 node:782 node:788 node:789 node:804 node:805 node:806 node:807 node:809 node:810 node_view rendered user:9 webform:search_form
X-Drupal-Dynamic-Cache
Other
MISS
X-Generator
Other
Drupal 11 (https://www.drupal.org)

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology