Open
Cached
·
just now
14
Headers
Detected Technologies from Headers
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Connection
close
Transfer-Encoding
chunked
connection: close transfer-encoding: chunked
Caching Headers
Etag
W/"290d4-654d3f7662aa1-gzip"
Last-Modified
Mon, 22 Jun 2026 09:07:05 GMT
etag: W/"290d4-654d3f7662aa1-gzip" last-modified: Mon, 22 Jun 2026 09:07:05 GMT
Content Headers
Content-Type
text/html; charset=UTF-8
content-type: text/html; charset=UTF-8
CORS Headers
No CORS headers found
Cookies Headers
Other Headers
Date
Fri, 07 Aug 2026 13:04:20 GMT
X-Host
fsclub.az
X-Tilda-Imprint
3321b94f-08cf-4398-a711-721bf1ef0290
X-Tilda-Server
33
X-Ws-Id
2
date: Fri, 07 Aug 2026 13:04:20 GMT x-host: fsclub.az x-tilda-imprint: 3321b94f-08cf-4398-a711-721bf1ef0290 x-tilda-server: 33 x-ws-id: 2
Recommendations
Enable compression (gzip/brotli) to improve performance
Add Cache-Control header to optimize caching