HTTP Headers Analysis for https://getslateedge.com

SSL Verification Bypassed

The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.

Reason:

Hostname Mismatch - certificate is issued for specialredirect.chase.com, chase.co.uk, chase.de, chasecreditcards.com, chasedigitalpayments.com, chaselovelocal.com, chaseloveslocal.com, chasemobilepay.com, chasetravel.com, not for getslateedge.com

Open Cached · just now

19 Headers

Detected Technologies from Headers

See all in URL Inspect 31

Adobe Target

AWS CloudFront

Gravatar

Adobe Audience Manager

Adobe Dynamic Tag Management

Adobe Fonts (Typekit)

Advertising.com

Amazon Advertising

AppNexus (Xandr)

AWS Active incidents

Amazon S3

Microsoft Advertising

Crazy Egg

Facebook

Google Analytics

Google Conversion Tracking

Google DoubleClick

Google Search

Google Tag Manager

Knotch

Liveramp

Rubicon Project

Snapchat

Tapad

Teads

The Trade Desk

Twitter

Yahoo

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Good

frame-ancestors; script-src; img-src; +6 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Strengthen CSP by removing 'unsafe-eval'
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

Vary

Performance

Accept-Encoding

accept-ranges: bytes
connection: close
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store

Etag

Caching

"3c49-652588a3aacd4"

Expires

Caching

Sun, 24 May 2026 19:34:12 GMT

Last-Modified

Caching

Thu, 21 May 2026 19:01:29 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store
etag: "3c49-652588a3aacd4"
expires: Sun, 24 May 2026 19:34:12 GMT
last-modified: Thu, 21 May 2026 19:01:29 GMT
pragma: no-cache

Content Headers

Content-Length

Content

15433

Content-Type

Content

text/html;charset=utf-8

content-length: 15433
content-type: text/html;charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

set-cookie: AWSALB=jTEb5N3XlWfohvhWr8kJrT00ofz9DCtT5hTShL6SC2scK8mSUNOxhc+1Ra7Dj73+numWl4WnKi3Lh7oJ0j8b2fpJqKXaGgJ9Fi6wiMjA0nvhR1xnuPPBOgIk98T0; Expires=Sun, 31 May 2026 19:34:12 GMT; Path=/
AWSALBCORS=jTEb5N3XlWfohvhWr8kJrT00ofz9DCtT5hTShL6SC2scK8mSUNOxhc+1Ra7Dj73+numWl4WnKi3Lh7oJ0j8b2fpJqKXaGgJ9Fi6wiMjA0nvhR1xnuPPBOgIk98T0; Expires=Sun, 31 May 2026 19:34:12 GMT; Path=/; SameSite=None; Secure
akaalb_chase_creditcards_com=1782243252~op=chase_creditcards_com:creditcards_capgemini_com|~rv=95~m=creditcards_capgemini_com:0|~os=751522fcac6a6c0b9f7391004dbefd6b~id=1f051aab5f62db4dc382a32e88a88abc; path=/; Expires=Tue, 23 Jun 2026 19:34:12 GMT; HttpOnly; Secure; SameSite=None
TS0161689b=0164cfe1d519db767b565da4a1bbae293bd56f42c00ac739ad3f06abb035cf292df991b063f29df02e7b3ea89b91ea8105d73901c0; Path=/
ppnet_3345=!Neul3Qp2nAi90tuIdtFCymNm2athVbAAk/gmiEV6SjmAeFH6oC7iSV+YT/Xp1eNjM9p4sYFavZtN; path=/; Httponly; Secure

Other Headers

Date

Other

Sun, 24 May 2026 19:34:12 GMT

Server-Timing

Other

cdn-cache; desc=MISS, edge; dur=28, origin; dur=17, ak_p; desc="1779651252320_399139595_1404238434_4480_6399_11_0_-";dur=1

X-Amzn-Trace-Id

Other

0.0b63ca17.1779651252.53b2fa62

date: Sun, 24 May 2026 19:34:12 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=28, origin; dur=17, ak_p; desc="1779651252320_399139595_1404238434_4480_6399_11_0_-";dur=1
x-amzn-trace-id: 0.0b63ca17.1779651252.53b2fa62

Recommendations

Enable compression (gzip/brotli) to improve performance