Open
Cached
·
just now
19
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=15552001
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
3 headers
Accept-Ranges
Performance
bytes
Connection
Performance
close
Vary
Performance
X-UA-Device, Accept
Caching Headers
0 headers
No caching headers found
Content Headers
2 headers
Content-Length
Content
38092
Content-Type
Content
text/html; charset=utf-8
Server Headers
1 headers
Server
Server
nginx
CORS Headers
0 headers
No CORS headers found
Cookies Headers
0 headers
No cookies headers found
Other Headers
10 headers
Date
Other
Sun, 11 Jan 2026 22:21:39 GMT
Link
Other
<https://64.media.tumblr.com/avatar_3f11b6f5b7bc_128.pnj>; rel=icon
X-Nc
Other
MISS
X-Rid
Other
a339c8d7e163e4fe24d01cb12a745352
X-Tumblr-Pixel
Other
2
X-Tumblr-Pixel-0
Other
https://px.srvcs.tumblr.com/impixu?T=1768170099&J=eyJ0eXBlIjoidXJsIiwidXJsIjoiaHR0cDovL2RheXRvbmNoZW4uY29tLyIsInJlcXR5cGUiOjAsInJvdXRlIjoiLyJ9&U=BFBBMBEEDI&K=71eb08e94e4150e2e3497b3f183bc1006f25db4ea74964dba8211050b71bfdd9--https://px.srvcs.tumblr.com/impixu?T=1768170099&J=eyJ0eXBlIjoicG9zdCIsInVybCI6Imh0dHA6Ly9kYXl0b25jaGVuLmNvbS8iLCJyZXF0eXBlIjowLCJyb3V0ZSI6Ii8iLCJwb3N0cyI6W3sicG9zdGlkIjoiMTcyMzgxNjIwNzk5IiwiYmxvZ2lkIjozMzczNDM3NDksInNvdXJjZSI6MzN9LHsicG9zdGlkIjoiMTU3NzA1NjkxMjY0Iiwi
X-Tumblr-Pixel-1
Other
YmxvZ2lkIjozMzczNDM3NDksInNvdXJjZSI6MzN9XX0=&U=OHIOBFPHFO&K=af584e9cad412bbb3a2bcbce6d6ac24f2d46eaba2bd02e2c73eafdf10b51f1a3
X-Tumblr-User
Other
daytonchen
X-Ua-Compatible
Other
IE=Edge,chrome=1
X-Ua-Device
Other
desktop
Recommendations
Enable compression (gzip/brotli) to improve performance
Add Cache-Control header to optimize caching