HTTP Headers Analysis for https://dev.ivendnext.com

SSL Verification Bypassed

The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.

Reason:

Hostname Mismatch - certificate is issued for posui.ivendnext.com, not for dev.ivendnext.com

Open Cached · just now

15 Headers

Detected Technologies from Headers

See all in URL Inspect 1

Nginx

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

same-origin, strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

keep-alive

Vary

Performance

Accept-Encoding

connection: keep-alive
vary: Accept-Encoding

Caching Headers

No caching headers found

Content Headers

Content-Length

Content

355201

Content-Type

Content

text/html; charset=utf-8

content-length: 355201
content-type: text/html; charset=utf-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

set-cookie: sid=Guest; Expires=Wed, 25 Feb 2026 02:01:53 GMT; Max-Age=612000; Secure; HttpOnly; Path=/; SameSite=Lax
system_user=no; Secure; Path=/; SameSite=Lax
full_name=Guest; Secure; Path=/; SameSite=Lax
user_id=Guest; Secure; Path=/; SameSite=Lax
user_image=; Secure; Path=/; SameSite=Lax

Other Headers

Date

Other

Wed, 18 Feb 2026 00:01:53 GMT

Link

Other

URL /assets/frappe/dist/css/website.bundle.7JPZ2MR4.css

rel=preload as=style

URL /assets/erpnext/dist/css/erpnext-web.bundle.KNLMAWEL.css

rel=preload as=style

URL /assets/ivendnext_pos/plugins/fontawesome/all.min.css

rel=preload as=style

URL /assets/ivendnext_pos/css/login.css

rel=preload as=style

URL /assets/frappe/dist/css/website.bundle.7JPZ2MR4.css

rel=preload as=style

URL /assets/erpnext/dist/css/erpnext-web.bundle.KNLMAWEL.css

rel=preload as=style

URL /assets/ivendnext_pos/plugins/fontawesome/all.min.css

rel=preload as=style

URL /assets/ivendnext_pos/css/login.css

rel=preload as=style

URL /assets/ivendnext_pos/css/dv-login.css

rel=preload as=style

URL /assets/ivendnext_pos/dist/css/datavalue_theme_web.bundle.3CKSTM3E.css

rel=preload as=style

URL /assets/frappe/dist/js/frappe-web.bundle.JY6YZDCJ.js

rel=preload as=script

URL /website_script.js

rel=preload as=script

URL /assets/erpnext/dist/js/erpnext-web.bundle.J4A2DQB4.js

rel=preload as=script

URL /assets/ivendnext_pos/js/datavalue_theme_web.bundle.js

rel=preload as=script

X-From-Cache

Other

False

X-Page-Name

Other

date: Wed, 18 Feb 2026 00:01:53 GMT
link: </assets/frappe/dist/css/website.bundle.7JPZ2MR4.css>; rel=preload; as=style,</assets/erpnext/dist/css/erpnext-web.bundle.KNLMAWEL.css>; rel=preload; as=style,</assets/ivendnext_pos/plugins/fontawesome/all.min.css>; rel=preload; as=style,</assets/ivendnext_pos/css/login.css>; rel=preload; as=style,</assets/ivendnext_pos/css/dv-login.css>; rel=preload; as=style,</assets/ivendnext_pos/dist/css/datavalue_theme_web.bundle.3CKSTM3E.css>; rel=preload; as=style,</assets/frappe/dist/js/frappe-web.bundle.JY6YZDCJ.js>; rel=preload; as=script,</website_script.js>; rel=preload; as=script,</assets/erpnext/dist/js/erpnext-web.bundle.J4A2DQB4.js>; rel=preload; as=script,</assets/ivendnext_pos/js/datavalue_theme_web.bundle.js>; rel=preload; as=script
x-from-cache: False
x-page-name: login

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching