17 Headers

Detected Technologies from Headers

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=63072000; includeSubDomains; preload
Content-Security-Policy
Good
default-src; script-src; style-src; +14 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer-when-downgrade
Permissions-Policy
Present
accelerometer=(none), ambient-light-sensor=(none), autoplay=(none); +21 more
Recommendations
  • Strengthen CSP by removing 'unsafe-eval'

Performance Headers

Accept-Ranges
Performance
bytes
Connection
Performance
close

Caching Headers

Last-Modified
Caching
Mon, 05 May 2025 21:41:24 GMT

Content Headers

Content-Length
Content
683
Content-Type
Content
text/html

Server Headers

No server headers found

CORS Headers

Access-Control-Allow-Headers
Cors
DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Allow-Methods
Cors
GET, POST, OPTIONS
Access-Control-Allow-Origin
Cors
*

Cookies Headers

No cookies headers found

Other Headers

Date
Other
Wed, 06 May 2026 08:36:18 GMT
Feature-Policy
Other
accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'none'; camera 'none'; document-write 'none'; encrypted-media 'none'; fullscreen 'none'; geolocation 'none'; gyroscope 'none'; layout-animations 'none'; legacy-image-formats 'none'; magnetometer 'none'; midi 'none'; oversized-images 'none'; payment 'none'; picture-in-picture 'none'; speaker 'none'; sync-script 'none'; sync-xhr 'none'; unoptimized-images 'none'; unsized-media 'none'; usb 'none'; vertical-scroll 'none'; vr 'none'

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching