HTTP Headers Analysis for https://game.themindaction.com

Detected Technologies from Headers

See all in URL Inspect 1

Cloudflare CDN

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Present

ALLOW-FROM https://app.kajabi.com https://app.vibely.io https://communities.kajabi.com https://communities-widget.kajabi.com *.mykajabi.com https://communities.newkajabi-staging.com https://communities-widget.newkajabi-staging.com https://game.themindaction.com

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Significantly strengthen CSP directives
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

max-age=0, private, must-revalidate, no-cache, no-store

Etag

Caching

W/"163b4875da02bb0658b6cbe8e8bbe2c2"

Expires

Caching

Mon, 01 Jan 1990 00:00:00 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, private, must-revalidate, no-cache, no-store
etag: W/"163b4875da02bb0658b6cbe8e8bbe2c2"
expires: Mon, 01 Jan 1990 00:00:00 GMT
pragma: no-cache

Content Headers

Content-Length

Content

218476

Content-Type

Content

text/html; charset=utf-8

content-length: 218476
content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: AWSALBTG=MWeFkFffhjdUvN72tDqrBiidDyGm+JiAvKdtUww/NlW5FZG/YyZMmUMm6+LY+855N+2g9SB7Iv9yT0zgzxpy86neJxfs8JHhAnH8LMYXTxjdnT1aEQarrDzXwQV1u4EuxjpqGc+q8rRwjcKbDjS9F7bQOMIrQ5DqLpOkVdcP+TmD; Expires=Tue, 25 Aug 2026 04:47:45 GMT; Path=/
AWSALBTGCORS=MWeFkFffhjdUvN72tDqrBiidDyGm+JiAvKdtUww/NlW5FZG/YyZMmUMm6+LY+855N+2g9SB7Iv9yT0zgzxpy86neJxfs8JHhAnH8LMYXTxjdnT1aEQarrDzXwQV1u4EuxjpqGc+q8rRwjcKbDjS9F7bQOMIrQ5DqLpOkVdcP+TmD; Expires=Tue, 25 Aug 2026 04:47:45 GMT; Path=/; SameSite=None; Secure
vs_uniques_template_metadata=eJyLNjI0NTUztrAwN4sFABH3Asw%3D; path=/; expires=Thu, 18 Feb 2027 04:47:45 GMT; secure; HttpOnly; SameSite=None
_csrf_token=eyJfcmFpbHMiOnsibWVzc2FnZSI6IkltdDVWVmh2U25Zd1ZUWlpUV1pPYUZsbE1XbGFaMU5ZUzJwTU5XOW9jVmxOU3poSFVuWkVSVVk1VFRnaSIsImV4cCI6IjIwMjctMDgtMThUMDQ6NDc6NDUuMDgzWiIsInB1ciI6bnVsbH19--51e7036a08c72ff66b0595cdb1740ded50d56db9; path=/; expires=Wed, 18 Aug 2027 04:47:45 GMT; HttpOnly; Secure; SameSite=None
_kjb_session=4b9085e6b7228950f465364e238b30c1; path=/; expires=Wed, 19 Aug 2026 04:47:45 GMT; HttpOnly; Secure; SameSite=None
__cf_bm=YQCnjmukv7FHLHHIT66l_F8HExynlz5J8.oSAQHWRxk-1787028465.0432162-1.0.1.1-12Qyi3hcpyHOPnLXhlcQ5hNCuyYWACNZ4mO.p6nJpKoBHKZRHdDA.tEl1sUEVf9LCYble02klDTHPQs_WTcftRBvEVw1YXCd.Dbz_eUYke2oez3kEeD3ZM2Zf9QTEdIS; HttpOnly; SameSite=None; Secure; Path=/; Domain=game.themindaction.com; Expires=Tue, 18 Aug 2026 05:17:45 GMT
_cfuvid=kX1Dqbpui7co1sovLhICvSMXkE11_qesQNlkBrFYDPg-1787028465.0432162-1.0.1.1-XQ9U2.k6raEnFEVEp_apYUxNij2yqEki.Qpqt_n0n5s; HttpOnly; SameSite=None; Secure; Path=/; Domain=game.themindaction.com

Other Headers

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

a2ce48428c54ff80-IAD

Date

Other

Tue, 18 Aug 2026 04:47:45 GMT

X-Download-Options

Other

noopen

X-Permitted-Cross-Domain-Policies

Other

none

X-Request-Id

Other

7c24fac4-d133-4631-8b53-89d72d88ff68

cf-cache-status: DYNAMIC
cf-ray: a2ce48428c54ff80-IAD
date: Tue, 18 Aug 2026 04:47:45 GMT
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: 7c24fac4-d133-4631-8b53-89d72d88ff68

Recommendations

Enable compression (gzip/brotli) to improve performance