HTTP Headers Analysis for https://express.rogers.yahoo.com

Open Cached · 39m ago

15 Headers

Detected Technologies from Headers

See all in URL Inspect 2

Apache Traffic Server

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Weak

frame-ancestors; sandbox; report-uri Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

connection: close
transfer-encoding: chunked
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

max-age=0, private

Expires

Caching

-1

cache-control: max-age=0, private
expires: -1

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

Server

ATS

server: ATS

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Sun, 04 Oct 2026 22:54:51 GMT

Link

Other

URL

/_nca/_next/static/media/7553561d3efb1daf-s.p.woff2?dpl=sha-db8cc47

rel=preload as=font crossorigin type=font/woff2

URL

/_nca/_next/static/css/7af1fe76ce1ba7b8.css?dpl=sha-db8cc47

rel=preload as=style

URL

/_nca/_next/static/css/c28189b1906ac9b1.css?dpl=sha-db8cc47

rel=preload as=style

URL

/_nca/_next/static/css/57a0f95834a384b3.css?dpl=sha-db8cc47

rel=preload as=style

X-Aws-Region

Other

unknown

X-Deployment-Id

Other

sha-db8cc47

date: Sun, 04 Oct 2026 22:54:51 GMT
link: </_nca/_next/static/media/7553561d3efb1daf-s.p.woff2?dpl=sha-db8cc47>; rel=preload; as="font"; crossorigin=""; type="font/woff2", </_nca/_next/static/css/7af1fe76ce1ba7b8.css?dpl=sha-db8cc47>; rel=preload; as="style", </_nca/_next/static/css/c28189b1906ac9b1.css?dpl=sha-db8cc47>; rel=preload; as="style", </_nca/_next/static/css/57a0f95834a384b3.css?dpl=sha-db8cc47>; rel=preload; as="style", </_nca/_next/static/css/35ed6979caf5cba9.css?dpl=sha-db8cc47>; rel=preload; as="style", </_nca/_next/static/css/e388c648ba6d95b1.css?dpl=sha-db8cc47>; rel=preload; as="style"
x-aws-region: unknown
x-deployment-id: sha-db8cc47

Recommendations

Enable compression (gzip/brotli) to improve performance