Open
Cached
·
just now
18
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=15552000; includeSubDomains
Content-Security-Policy
Good
script-src; child-src; connect-src; +13 more
script-src 'sha256-9+E4OlpS7bdUe51C5Qrvb2ds1+okAVVSUA/7ILZ0A14=' 'self' https://*.stripe.com; child-src 'none'; connect-src https://*.stripe.com 'self' https://*.iubenda.com https://*.pwnedpasswords.com https://www.federacy.report; default-src 'none'; font-src 'self' https://*.gstatic.com data:; frame-src https://*.stripe.com 'self'; img-src https://*.stripe.com 'self' data:; manifest-src 'none'; media-src 'none'; object-src 'none'; style-src https://*.googleapis.com 'unsafe-inline' 'self'; worker-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action https://*.federacy.com; report-uri https://1392f01d6bc3000db9255bc87fe01447.report-uri.com/r/d/csp/enforce
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
same-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Strengthen CSP by removing 'unsafe-eval'
- • Consider adding Permissions-Policy to control browser features
Performance Headers
3 headers
Accept-Ranges
Performance
none
Connection
Performance
close
Vary
Performance
Accept-Encoding
Caching Headers
1 headers
Etag
Caching
"ddb6f-xFt0EwCQDY87n4uhFYKj8jpxzME"
Content Headers
2 headers
Content-Length
Content
908143
Content-Type
Content
text/html; charset=utf-8
Server Headers
1 headers
Server
Server
nginx
CORS Headers
0 headers
No CORS headers found
Cookies Headers
0 headers
No cookies headers found
Other Headers
4 headers
Date
Other
Sun, 30 Nov 2025 05:11:07 GMT
Report-To
Other
{"group":"default","max_age":31536000,"endpoints":[{"url":"https://1392f01d6bc3000db9255bc87fe01447.report-uri.com/a/d/g"}],"include_subdomains":true}
X-Dns-Prefetch-Control
Other
off
X-Download-Options
Other
noopen
Recommendations
Enable compression (gzip/brotli) to improve performance
Add Cache-Control header to optimize caching
Analysis completed in 333ms