HTTP Headers Analysis for https://foxfirstrun.com

Detected Technologies from Headers

See all in URL Inspect 3

AWS

AWS API Gateway

AWS CloudFront

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-cache, private

cache-control: no-cache, private

Content Headers

Content-Length

Content

74062

Content-Type

Content

text/html; charset=UTF-8

content-length: 74062
content-type: text/html; charset=UTF-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: XSRF-TOKEN=eyJpdiI6InVmK0RsR1JVRGFURjRvbGNFeTJVY3c9PSIsInZhbHVlIjoiMkY1dWNiTEh3YkhSV3dRZDdOdXFJT09McUNtWnRKaVZaRWU5dFIydEE1UHpwM0M1a0xha1hKNzJQQlJaOENtKzY2SXdaczMxbE1DZ0VRd1oweGM3U3pJT2R6cGh3MjYyLytEOHczM0ZTdHZEd3ZpZ2p0citWV3VNZXE0QytvcDAiLCJtYWMiOiI1MmQ1ZTM3YzRjZmZkMGM2ZDVhMmY3M2EyYjIxODA4NDgyYmZlM2ViM2RlODE1ZTliZGQ4MjI5MmE2ZTlkOTk0IiwidGFnIjoiIn0%3D; expires=Fri, 14-Aug-2026 06:10:21 GMT; Max-Age=7200; path=/; samesite=lax
fox_first_run_session=eyJpdiI6ImZvbDFWS285L1d3ekVvZWxONllFQmc9PSIsInZhbHVlIjoiTDJHemRDRXd3V2czN2I5Mk5mVDd2bktmMHd3cTlXVUhzSTh1MU9uY2pmZVdvM3J6Wm9Qd3VLT0lwNExMRHF0dmZQKzU1bXpBUEVINVdpMDU5OE5QcWJ3c3hxdlh4L3JvSkVRWlpUcjdSNXpsMTZVYXlCb0lJT3QxZ20rWnBFUzciLCJtYWMiOiJhZTlhM2VmOTYzNDFhMjhjNjkxMTlmZjljOTg5YWViMGFkYWFkOTY5YmM3ZTY2MzRmMWJjNWRmYzhmZDJhOGEyIiwidGFnIjoiIn0%3D; expires=Fri, 14-Aug-2026 06:10:21 GMT; Max-Age=7200; path=/; httponly; samesite=lax
Ri0tuCsyiATgtEmy0xTW93HOl8BGqHNNuLwTLaAQ=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; expires=Fri, 14-Aug-2026 06:10:21 GMT; Max-Age=7200; path=/; httponly; samesite=lax

Other Headers

Date

Other

Fri, 14 Aug 2026 04:10:21 GMT

Via

Other

1.1 3b8d93c8b65e1a5af1b60cc014ba6c60.cloudfront.net (CloudFront)

X-Amz-Apigw-Id

Other

CEw_JF0yIAMEtFQ=

X-Amz-Cf-Id

Other

k1HQ_NVTlOV8peUGvVwV1v3QooNyupcy6jLZCkgmAGRt5dgeOAnfTQ==

X-Amz-Cf-Pop

Other

ORD58-P16

X-Amzn-Remapped-Date

Other

Fri, 14 Aug 2026 04:10:21 GMT

X-Amzn-Requestid

Other

2f6ee8d2-5169-4de4-87c2-fa8674fce41d

X-Amzn-Trace-Id

Other

Root=1-6a7e952d-34d1a3312f3f76d562338b92;Parent=112d4aa77e4f9012;Sampled=0;Lineage=1:a6dbf136:0

X-Cache

Other

Miss from cloudfront

date: Fri, 14 Aug 2026 04:10:21 GMT
via: 1.1 3b8d93c8b65e1a5af1b60cc014ba6c60.cloudfront.net (CloudFront)
x-amz-apigw-id: CEw_JF0yIAMEtFQ=
x-amz-cf-id: k1HQ_NVTlOV8peUGvVwV1v3QooNyupcy6jLZCkgmAGRt5dgeOAnfTQ==
x-amz-cf-pop: ORD58-P16
x-amzn-remapped-date: Fri, 14 Aug 2026 04:10:21 GMT
x-amzn-requestid: 2f6ee8d2-5169-4de4-87c2-fa8674fce41d
x-amzn-trace-id: Root=1-6a7e952d-34d1a3312f3f76d562338b92;Parent=112d4aa77e4f9012;Sampled=0;Lineage=1:a6dbf136:0
x-cache: Miss from cloudfront

Recommendations

Enable compression (gzip/brotli) to improve performance