24 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Basic
report-uri; default-src; script-src; +15 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*; +6 more
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

Performance Headers

Accept-Ranges
Performance
none
Connection
Performance
close
Transfer-Encoding
Performance
chunked
Vary
Performance
Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding

Caching Headers

Cache-Control
Caching
no-cache, no-store, max-age=0, must-revalidate
Expires
Caching
Mon, 01 Jan 1990 00:00:00 GMT
Pragma
Caching
no-cache

Content Headers

Content-Type
Content
text/html; charset=utf-8

Server Headers

Server
Server
ESF

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie
Cookies

Other Headers

Accept-Ch
Other
Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
Alt-Svc
Other
h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Date
Other
Mon, 06 Apr 2026 01:58:41 GMT
Document-Policy
Other
include-js-call-stacks-in-crash-reports
P3p
Other
CP="This is not a P3P policy! See g.co/p3phelp for more info."
Reporting-Endpoints
Other
default="/_/BardChatUi/web-reports?context=eJwNzHtQ1PcVBXBcck-oY6uopYiPEhKsUSA8NFJFqiKOiLu__X1JxAErjyrTOFYIS9RE62AAUTEQowhEC6gBE4xCYhRNpdSaxDpY2OWxb0y0Gh_NSyvYuFF7_vjM3Dvn3jPy7THTR4b4adNC_AzXbxpASyJuGYw0nHDL4KOonbcMsTRMPjo0-7ahmXYP3TbsoZRJdwwaXZ1yx3CTtjn3Szl9YK6RExSv10givT1QI9VUT0fozJ0a6aRxvhoJpsrltbKXDlAjvU_H6dX1tbKRjOW1oqhod61sof-eqZWX-7olk8pc3VJD__h1j1yi3soecVBgVY8EUdHhHtlOu-ggWTw98gYd_7JHTtLsl6wyj35fZZVculhjlR6K6bDKbAq6a5WJtOV_VgkPtMl0SjfbJIvWUiFNy7FJJNmLbOKloxts0kZ5e2yyjs7tt8l5igntlSTyZvfKNerK7xUbtb_VKx2UndQneVT27z6poH7_fvFSYXC_lNK4iH6ZQD-L6ZfR1NLUL6207H6_KDLuGxBFDacH5D0quT8gOyhwrl2CKGqeXeJoPi2mrkV2GaDRpXYZT4m77bKIHhyyyyP69CO7dNKm03bZSl1kpa8v2OUbmhjikFAKW-CQG6855D-0Y4NDKukDaqUXNzlkPv18s0PGUXWJQw5Qy3SntFLsDKdkr3BKHh3OcErdSqfce8Mp4zc7JaKCOd2455Q79KfRLimklmCX7AlxSVmySybrLgmnN9e6ZD_d3OmSb6m6yiVHqP2iSzoo6bpLFtOPUW4Z8YJbHpF_tFtmLXHLHOpY7ZYL9Ldit3xG79e55QQNH3WLj7Z2u6WEJvt5ZOgpj_goYYJHTi72yFmanOKRMErM8Mgiyv7BI3nU6vPIKSo1eKU4wCvbKWi-VybRa0u8spkebPTKI9pSzRtKdXlFp8YfvNJMq8IHJYeuRg_KTXq4aFBGJA9KVfqg7KPvigdlmNYPD4qF_vlgULpp5dNXJJdC-55IONXdeyINdPdUCoap8UoKmmnuuaVYQEELUzGJXCtSMUhjMlMRRM9Wp-J5OtaQijmXU5FINuMyOOir9GX4nn751jJMJD3ICPtMIyYkGzGFIl4xIpaGLUYEFBlR94UR9XT3oRFD9Lq_CcV0LtKEv9MzsSaEUzwl0L3ZJhxLMuEjak83IbHMhFO7TPgrXd9nwjANtZjwI7kfm_AldU7XcIEyX9CQRetmasgnwywNQnPnaFhAjS9paKKOPA3nqeWghja68BcNl6iyScM75GvV4NfGvk4N5YTPNPyC_Lo0-FP8ZQ0J9NS3Glb9pOEP9PgR98caplHGaDNW0dFfmdFCJ4LN-ITKQs3YRQvnmbGYytPNqKBNJWb8mfZVmfEuHdzD371mzKg3I5qmfm5GPAX_y4zn6EmfGf79ZrTfN-NTKhg2o4jmiA7f0zr8AnR8PEpH4lgdSZQ_S4eFHvxWx8sLdWTS75bqSKYUkw4jBWo6xtOba3XsoAPrdDRQdZGOOjq9Tcf5Sh0X6bkWHc_T0nYdGoV8oSOMLFYdr1OBgzP1UT9duqLjMrXc0NFGdbd11NOZuzrO0cCQDg8dfqijic7SeYrz6YinFY91rKJvROF7ehYK0-iPgQoFdHSswjEqmaxQTq5QhauU_YzCapoZrnCNvqaJU5n_RiFzrsLyBIUMKk5W2E4rlyrk0Iw0hSi6TrdoaLmCj6IzFOIoMlchhjotCp9TfanCETpZpnCWtO3spqYdCi0UUKkwhmSvwkgqa1CooHcbFQ7RtmaFnfTwQ4URxxWM9N3HCvcp_5LCRnJ1KXjp0DWF9-iYT6GNwn5SmEpLRqXBRF1T0mAlv4g0lKxJQwVZC9LgpIytacih2tI0HKCxowJszZe7MearBmvZiLCI3PxXs3IsllcsRTnriyJzcwpXR25ckxtpWVO4YU1hVmx07IvRcXExUdFxWQWx_wcyd0GX"
X-Ua-Compatible
Other
IE=edge

Recommendations

Enable compression (gzip/brotli) to improve performance