HTTP Headers Analysis for https://firstrepublic.com

Detected Technologies from Headers

See all in URL Inspect 4

Akamai

AWS Active incidents

Envoy

Next.js

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Present

ch-ua-full-version-list=("https://*.chase.com"), ch-ua-platform-version=("https://*.chase.com"), ch-ua-arch=("https://*.chase.com"); +3 more

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

public, max-age=836

Etag

Caching

"1qobaysxwu6ksk"

cache-control: public, max-age=836
etag: "1qobaysxwu6ksk"

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Accept-Ch

Other

Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64

Date

Other

Sun, 10 May 2026 10:38:13 GMT

Server-Timing

Other

cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1778409493831_400321303_452295160_49_11988_0_4_-";dur=1

X-Akamai-Transformed

Other

9 - 0 pmb=mRUM,2

X-Amzn-Trace-Id

Other

0.176bdc17.1778409493.1af579f8

X-Content-Security-Policy

Other

frame-ancestors 'none'

X-Envoy-Upstream-Service-Time

Other

19

X-Nextjs-Cache

Other

STALE

accept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
date: Sun, 10 May 2026 10:38:13 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1778409493831_400321303_452295160_49_11988_0_4_-";dur=1
x-akamai-transformed: 9 - 0 pmb=mRUM,2
x-amzn-trace-id: 0.176bdc17.1778409493.1af579f8
x-content-security-policy: frame-ancestors 'none'
x-envoy-upstream-service-time: 19
x-nextjs-cache: STALE

Recommendations

Enable compression (gzip/brotli) to improve performance