HTTP Headers Analysis for https://giftback.cc

Detected Technologies from Headers

See all in URL Inspect 3

Cloudflare NEL Monitoring

Cloudflare CDN

PHP

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

geolocation=(), midi=(), sync-xhr=(self); +6 more

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

connection: close
transfer-encoding: chunked
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

no-store, no-cache, must-revalidate

Expires

Caching

Thu, 19 Nov 1981 08:52:00 GMT

Pragma

Caching

no-cache

cache-control: no-store, no-cache, must-revalidate
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

Access-Control-Allow-Methods

Cors

GET,POST,OPTIONS,DELETE,PUT

Access-Control-Allow-Origin

Cors

https://www.facebook.com

access-control-allow-methods: GET,POST,OPTIONS,DELETE,PUT
access-control-allow-origin: https://www.facebook.com

Cookies Headers

Set-Cookie

Cookies

set-cookie: www_csrf_cookie_name=d30b11d74e7c55c65bdeed1a4294be97; expires=Sat, 05-Sep-2026 00:07:55 GMT; Max-Age=7200; path=/; domain=www.giftback.cc; secure
www_csrf_cookie_name=d30b11d74e7c55c65bdeed1a4294be97; expires=Sat, 05-Sep-2026 00:07:55 GMT; Max-Age=7200; path=/; domain=www.giftback.cc; secure
PHPSESSID=1ueb8aaiqa68k8vshe0m446815; path=/; domain=www.giftback.cc; secure; HttpOnly; SameSite=Lax
lang_code=tw; expires=Sat, 04-Sep-2027 22:07:55 GMT; Max-Age=31536000; path=/
www_web=VzELMVNhADtQKQN1X2sDO1I1VG5XeARwDW0BeQB1AGhTMAZkAgkFPgVmX31UaQ58VW1XYQwwCDtTJlY3DDFfag1rADgEO105BjNWa1w%2BATBXNQs%2FUzcANVA2AzBfYQM9UmdUZFc%2FBGYNPAEyADQAM1M8BmwCZgVjBTJffVRpDnxVbVdjDDIIO1MmVj8McV8HDWkAbwRmXS4Gb1YpXHsBcVdrC3hTbwAwUGADPF9zAzhSNVRgV3QEOg07ASQANAAzU2gGJAJvBXUFOV8sVGgOPlVnV2gMIAh0U3dWMwxzXwcNaQBsBGddMgZ%2BVnhcMwEgV2oLOlNlADtQcANrXzgDZFJxVHtXawQtDTABJAA2ACNTZAZ5AmwFZgUxX2VUcA5jVTZXIQx2CF5TZVY1DHVfMQ1%2BAGIEdl0lBihWYVxhAWlXYQs8U20AOVBnAzNfaAM8UjJUYVdhBH4%3D; expires=Sun, 06-Sep-2026 22:07:55 GMT; Max-Age=172800; path=/; domain=www.giftback.cc; secure; HttpOnly; SameSite=None

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

a3604f50c8b716b7-IAD

Date

Other

Fri, 04 Sep 2026 22:07:55 GMT

Nel

Other

Report-To Group cf-nel max-age: 1w

success: 0.0%

Report-To

Other

Group cf-nel max-age: 1w

Endpoint 1 https://a.nel.cloudflare.com/report/v4?s=eJLMc%2FsBceNjfTpIdyeVkIFfwtzEiAYKud15dPfh84zRY1sv6JrqAZoG7av9AWrXfNbynzR22hgTV2XY5XMBrPdw%2B%2FfqcGRXziHtSRmDi6bmqggvI4h7qpea0WQ7br3mXiU%3D

Server-Timing

Other

cfCacheStatus;desc="DYNAMIC", cfEdge;dur=299,cfOrigin;dur=234

X-Served-By

Other

www.giftback.cc

alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
cf-ray: a3604f50c8b716b7-IAD
date: Fri, 04 Sep 2026 22:07:55 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=eJLMc%2FsBceNjfTpIdyeVkIFfwtzEiAYKud15dPfh84zRY1sv6JrqAZoG7av9AWrXfNbynzR22hgTV2XY5XMBrPdw%2B%2FfqcGRXziHtSRmDi6bmqggvI4h7qpea0WQ7br3mXiU%3D"}]}
server-timing: cfCacheStatus;desc="DYNAMIC", cfEdge;dur=299,cfOrigin;dur=234
x-served-by: www.giftback.cc

Recommendations

Enable compression (gzip/brotli) to improve performance