HTTP Headers Analysis for https://gentics.com

Detected Technologies from Headers

See all in URL Inspect 3

Apache

Debian

PHP

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Vary

Performance

Accept-Encoding

accept-ranges: bytes
connection: close
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

public, private

Etag

Caching

"af5dd44c"

cache-control: public, private
etag: "af5dd44c"

Content Headers

Content-Length

Content

30506

Content-Type

Content

text/html;charset=UTF-8

content-length: 30506
content-type: text/html;charset=UTF-8

Server Headers

Server

Apache/2.4.62 (Debian)

X-Powered-By

Server

PHP/8.2.29

server: Apache/2.4.62 (Debian)
x-powered-by: PHP/8.2.29

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: XSRF-TOKEN=eyJpdiI6ImkwdE9NODJsR1VwTlQyR0JzWmNGZnc9PSIsInZhbHVlIjoieGtEVFdRYWFPUmlod3lOSEltVkxzUmFnSjFoK2FmUWY3aHh6MmswNDJRVjYzeXl0SitkZkNLdUNQdmZySFhTK3dYdFFXeENlNUtpcjJLcVROSk4wVnJHb29ieTU2ZmVxQmVBQ2c3Um5yZ3BUWUdXbW5BSENwbzJHLzkwQkRNY2QiLCJtYWMiOiI0NDA4OWQwZGE4YjNiNDNjM2U0YWEyNmJmZjc3ZGUzOTUyY2FjMDQxYzRhOWYyNGM5YmM2YTA1NmRmYjk5YWYyIiwidGFnIjoiIn0%3D; expires=Tue, 04 Aug 2026 06:56:20 GMT; Max-Age=7200; path=/; domain=.gentics.com; samesite=lax
laravel_session=eyJpdiI6InZWOGZQV0Z6U2xGNUlkL2tpTXFyR2c9PSIsInZhbHVlIjoiSTVDZXNOTmplbE5mbWhPWmp0cWo4azlvMEhGUlM3ODFySytKaGhNZHc0SkswTFFIRTBMOGtDQjVlZTlLTk5DeC9ORS9EdzJVa0VFODZVTFBVVkJGL2QxZm9vQVZpRVg0QWpYblkrZGhONWVaN0pyajU0VzhQOVVycEVPYnpVSTMiLCJtYWMiOiI1NmE5ZDYxZjkwM2UzOWNkZTNjNmZmMzE0NzMwMDgzZGMyYzkwOTlhMzRhZTg0YjAxZDRkZWViNDY1OTZmZjEyIiwidGFnIjoiIn0%3D; expires=Tue, 04 Aug 2026 06:56:20 GMT; Max-Age=7200; path=/; domain=.gentics.com; httponly; samesite=lax
383b46dcbd711171abe0cb02dff4809d=8a6717571e697120c5026f7b1ae3b7d5; path=/; HttpOnly; Secure; SameSite=None

Other Headers

Date

Other

Tue, 04 Aug 2026 04:56:20 GMT

Via

Other

1.1 www.gentics.com

date: Tue, 04 Aug 2026 04:56:20 GMT
via: 1.1 www.gentics.com

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology