HTTP Headers Analysis for https://gnawo.com

Detected Technologies from Headers

See all in URL Inspect 1

LiteSpeed

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload, max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Weak

upgrade-insecure-requests; , Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Present

SAMEORIGIN, SAMEORIGIN

X-Content-Type-Options

Present

nosniff, nosniff

Referrer-Policy

Present

strict-origin-when-cross-origin, strict-origin-when-cross-origin

Permissions-Policy

Present

accelerometer=(), autoplay=(), camera=(); +41 more

Recommendations

• Significantly strengthen CSP directives

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Vary

Performance

Accept-Encoding

accept-ranges: bytes
connection: close
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

no-cache, must-revalidate, max-age=0, no-store, private

cache-control: no-cache, must-revalidate, max-age=0, no-store, private

Content Headers

Content-Length

Content

233106

Content-Type

Content

text/html; charset=UTF-8

content-length: 233106
content-type: text/html; charset=UTF-8

Server Headers

No server headers found

CORS Headers

Access-Control-Allow-Headers

Cors

Content-Type, Authorization, Content-Type, Authorization

Access-Control-Allow-Methods

Cors

GET,POST, GET,POST

access-control-allow-headers: Content-Type, Authorization, Content-Type, Authorization
access-control-allow-methods: GET,POST, GET,POST

Cookies Headers

No cookies headers found

Other Headers

Alt-Svc

Other

h3=":443"

Cross-Origin-Embedder-Policy-Report-Only

Other

unsafe-none; report-to='default', unsafe-none; report-to='default'

Cross-Origin-Opener-Policy-Report-Only

Other

unsafe-none; report-to='default', unsafe-none; report-to='default'

Date

Other

Tue, 25 Aug 2026 04:06:58 GMT

Edge-Cache-Engine-Mode

Other

ACTIVE

Server-Timing

Other

wp-before-template;dur=465.96, wp-template;dur=2206.06, wp-optimization-detective;dur=35.23, wp-total;dur=2672.03

X-Anubis-Action

Other

X-Anubis-Rule

Other

X-Anubis-Status

Other

X-Cache-Status

Other

HIT

X-Content-Security-Policy

Other

default-src 'self'; img-src *; media-src * data:;, default-src 'self'; img-src *; media-src * data:;

X-Dns-Prefetch-Control

Other

on

X-Litespeed-Cache-Control

Other

no-cache

X-Litespeed-Tag

Other

a4e_front,a4e_URL.6666cd76f96956469e7be39d750cc7d9,a4e_F,a4e_Po.600,a4e_PGS,a4e_guest,a4e_,a4e_MIN.dd315a315e4a779966bdbc1a0fa4535b.css,a4e_MIN.8579b9727770f05d0ad61344de4a1e60.js

X-Orig-Rid

Other

fdcaecfc99bb91f697dd7f99da9ba357

X-Permitted-Cross-Domain-Policies

Other

none, none

X-Request-Id

Other

bb1a88699332409502cb0c359fd9a5fc

alt-svc: h3=":443"
cross-origin-embedder-policy-report-only: unsafe-none; report-to='default', unsafe-none; report-to='default'
cross-origin-opener-policy-report-only: unsafe-none; report-to='default', unsafe-none; report-to='default'
date: Tue, 25 Aug 2026 04:06:58 GMT
edge-cache-engine-mode: ACTIVE
server-timing: wp-before-template;dur=465.96, wp-template;dur=2206.06, wp-optimization-detective;dur=35.23, wp-total;dur=2672.03
x-anubis-action: 
x-anubis-rule: 
x-anubis-status: 
x-cache-status: HIT
x-content-security-policy: default-src 'self'; img-src *; media-src * data:;, default-src 'self'; img-src *; media-src * data:;
x-dns-prefetch-control: on
x-litespeed-cache-control: no-cache
x-litespeed-tag: a4e_front,a4e_URL.6666cd76f96956469e7be39d750cc7d9,a4e_F,a4e_Po.600,a4e_PGS,a4e_guest,a4e_,a4e_MIN.dd315a315e4a779966bdbc1a0fa4535b.css,a4e_MIN.8579b9727770f05d0ad61344de4a1e60.js
x-orig-rid: fdcaecfc99bb91f697dd7f99da9ba357
x-permitted-cross-domain-policies: none, none
x-request-id: bb1a88699332409502cb0c359fd9a5fc

Recommendations

Enable compression (gzip/brotli) to improve performance