Open
          
        
        
        
          
            
            Cached
            ·
            just now
          
        
      
    
        
          
        
        
          16
        
        
          Headers
        
      
    
  HTTP Security Headers
Status
      Strict-Transport-Security
    
    
    
      
        Missing
      
    
    
    
      
        Not configured
      
    
    
    
      Content-Security-Policy
    
    
    
      
        Missing
      
    
    
    
      
        Not configured
      
    
    
    
      X-Frame-Options
    
    
    
      
        Missing
      
    
    
    
      
        Not configured
      
    
    
    
      X-Content-Type-Options
    
    
    
      
        Missing
      
    
    
    
      
        Not configured
      
    
    
    
      Referrer-Policy
    
    
    
      
        Missing
      
    
    
    
      
        Not configured
      
    
    
    
      Permissions-Policy
    
    
    
      
        Missing
      
    
    
    
      
        Not configured
      
    
    
    
            
            Recommendations
          
          - • Add Strict-Transport-Security header with max-age of at least 1 year
 - • Add Content-Security-Policy header to prevent XSS attacks
 - • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
 - • Add X-Content-Type-Options: nosniff
 - • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
 - • Consider adding Permissions-Policy to control browser features
 
Performance Headers
3 headers
      Connection
    
    
    
      Performance
    
    
    
      keep-alive
    
    
    
      Transfer-Encoding
    
    
    
      Performance
    
    
    
      chunked
    
    
    
      Vary
    
    
    
      Performance
    
    
    
      Accept-Encoding,Cookie
    
    
    Caching Headers
1 headers
      Cache-Control
    
    
    
      Caching
    
    
    
      max-age=600, must-revalidate
    
    
    Content Headers
1 headers
      Content-Type
    
    
    
      Content
    
    
    
      text/html; charset=UTF-8
    
    
    Server Headers
2 headers
      Server
    
    
    
      Server
    
    
    
      cloudflare
    
    
    
      X-Powered-By
    
    
    
      Server
    
    
    
      WP Engine
    
    
    CORS Headers
0 headers
        No CORS headers found
      
    
  Cookies Headers
1 headers
      Set-Cookie
    
    
    
      Cookies
    
    
    
      __cf_bm=WOJ9QiAx1dojZBiI7Ab2mEM6SjoknyZuQAT1kjWkvG8-1762258647-1.0.1.1-Gk28QlBtpWbw30q3rRxGDdLGHGwxhDhYbpe7JewRV94YAXzUAdwipmity5YshaXoutamnlQdZM3r91TDq0WkkRUgw6U0OB59.WbHwXwGeXA; path=/; expires=Tue, 04-Nov-25 12:47:27 GMT; domain=.www.superawesome.com; HttpOnly; Secure; SameSite=None
    
    
    Other Headers
8 headers
      Alt-Svc
    
    
    
      Other
    
    
    
      h3=":443"; ma=86400
    
    
    
      Cf-Cache-Status
    
    
    
      Other
    
    
    
      DYNAMIC
    
    
    
      Cf-Ray
    
    
    
      Other
    
    
    
      99940c61483ad6d5-IAD
    
    
    
      Date
    
    
    
      Other
    
    
    
      Tue, 04 Nov 2025 12:17:27 GMT
    
    
    
      Link
    
    
    
      Other
    
    
    
      <https://www.superawesome.com/?p=4655>; rel=shortlink
    
    
    
      X-Cache
    
    
    
      Other
    
    
    
      HIT: 2
    
    
    
      X-Cache-Group
    
    
    
      Other
    
    
    
      normal
    
    
    
      X-Cacheable
    
    
    
      Other
    
    
    
      SHORT
    
    
    Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology
Analysis completed in 0ms