Open
Cached
·
just now
24
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Weak
block-all-mixed-content; frame-ancestors; upgrade-insecure-requests
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
same-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Significantly strengthen CSP directives
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Consider adding Permissions-Policy to control browser features
Performance Headers
3 headers
Accept-Ranges
Performance
bytes
Connection
Performance
close
Vary
Performance
Accept-Encoding
Caching Headers
1 headers
Cache-Control
Caching
private, no-cache, no-store, max-age=0, must-revalidate
Content Headers
2 headers
Content-Length
Content
1004539
Content-Type
Content
text/html; charset=utf-8
Server Headers
1 headers
Server
Server
Byte-nginx
CORS Headers
0 headers
No CORS headers found
Cookies Headers
0 headers
No cookies headers found
Other Headers
12 headers
Date
Other
Thu, 11 Dec 2025 13:59:16 GMT
Link
Other
</next/_next/static/media/9cff5d163b440164-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </next/_next/static/media/c4b700dcb2187787-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </next/_next/static/media/df0a9ae256c0569c-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </next/_next/static/media/e4af272ccee01ff0-s.p.woff2>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </next/_next/static/css/67dc4512c6b98b4b.css>; rel=preload; as="style", </next/_next/static/css/b91386235ea798f1.css>; rel=preload; as="style", </next/_next/static/css/acd8a5f256aa9f64.css>; rel=preload; as="style"
Via
Other
cache04.oversea-VN-HAN11,cache05.oversea-VN-HCM4
X-Bdcdn-Cache-Status
Other
TCP_MISS,TCP_MISS
X-Cps-Cache
Other
HIT
X-Pathname
Other
/
X-Request-Id
Other
4c9709f2489c3734b1a471bd806123d0
X-Request-Ip
Other
64.34.84.14
X-Response-Cache
Other
miss
X-Response-Cinfo
Other
64.34.84.14
X-Tt-Trace-Tag
Other
id=5
X-Ua-Device
Other
desktop
Recommendations
Enable compression (gzip/brotli) to improve performance
Analysis completed in 4939ms