HTTP Headers Analysis for https://graph.instagram.com

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; preload; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

Origin, Accept-Encoding

connection: close
vary: Origin, Accept-Encoding

Caching Headers

Cache-Control

Caching

no-store

Expires

Caching

Sat, 01 Jan 2000 00:00:00 GMT

Pragma

Caching

no-cache

cache-control: no-store
expires: Sat, 01 Jan 2000 00:00:00 GMT
pragma: no-cache

Content Headers

Content-Length

Content

144

Content-Type

Content

application/json; charset=UTF-8

content-length: 144
content-type: application/json; charset=UTF-8

Server Headers

No server headers found

CORS Headers

Access-Control-Allow-Origin

Cors

*

access-control-allow-origin: *

Cookies Headers

No cookies headers found

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Date

Other

Thu, 07 May 2026 13:49:17 GMT

Debug-Link

Other

https://www.meta.com/debug/?mid=31b160a10b1aab8706548940e2b07763

Error-Mid

Other

31b160a10b1aab8706548940e2b07763

Proxy-Status

Other

http_request_error; e_fb_vipaddr="AcQXsXLV4Dd_CQjvnQGLw-lTdQM9bZo3uL4qidLNNH886MA-TNNID-dVIwWNyQBg0KGKZRuuNj30MB7HUZScZ6Z6eSEDQ9LMYdedEGu9"; e_clientaddr="AcQuZEBK6W8NCGRESqBC0WqtZmt8IXREDHR6roKKiPLXN7eIVc1ZPLiJYq5238ZVABBfuJKoO26FuAiTc2hWy1WT4qQ4O0MU90yqz9EovsVMynxrEw"; e_upip="AcSDNUTRMieP8Qum2W0mEU187ziq4jFoJGjMpsV9hkbNOGsdxj9tiVsWqikp1OIKXhFNuUC7JaXyNOPNYTguDSLAWBHHAJ1PZ7RRL7KOHw"; e_fb_zone="AcRNsiCBr7XQotHMMp0kjT_5Q8WaYycw8iLU44ZL6mfqhn1fVhb-Kr1bNc2J3Y0C"; e_fb_twtaskhandle="AcQYmhfsdTrep1htCAvpNgFYqhYbkX1Fp928bJgSVxXAKl7wivhx5j8p1XCx_cYrJfU8kluH3Tex5WKSwDvK3r2yxYbE5EIvRHtise9tZA"; e_proxy="AcQy13uZUA7cSDLK8c6K_7HLXhFcOKLKfxtv1mK41mXKcsiQMEL7KYZuJOP9GydnEVLTQsRbYbDupbryzZls", http_request_error; e_fb_vipaddr="AcSmGL5frOnJrrVSr5U7fJJIn05-MSDYwEPePGO6tc5g6MT_MVplL1NxyTSpdLAQ-Nl4lUqQ"; e_clientaddr="AcTcEvzMIskQrc_xE7D4vSZoE9iSQ7pHZDjF9PWTLVceT7hcep8KXnrCYjYTzNNweBn5PduYHebNqm_e"; e_upip="AcQYMdA5caoznhd1yTwEwhL3KA3fIYOXpvmBuA8Fhtko8Mrb2Eoop-9fzlQczrD2Dzf1dSJLBO6BFXj15Z3y84lWiXsFdq2IawuF5ILe"; e_fb_zone="AcS8ThzWWiIJnGkELthRFAYebVAPCuEFSCYHcz1i35dt7bBzPtpj82DqJhkkVg"; e_fb_twtaskhandle="AcQsmwMKiEgj_F-48n2eXibZnpKztL0nJEelqN-tSTTKwKX2RFftowZ33VIYjN1KEl7QhMjXmygKt5Ch7E-gPX0PSR84J6we0A9H"; e_proxy="AcTExAz1-STd6xKiPlv5smgknenH-zdx-8x5vk9RoBJRe6ktYUlEksM9rJligBdb2V8okTP_1xm00Qc"

Www-Authenticate

Other

OAuth "Facebook Platform" "invalid_request" "Invalid OAuth 2.0 Access Token"

X-Fb-Connection-Quality

Other

EXCELLENT; q=0.9, rtt=1, rtx=0, c=13, mss=1368, tbw=3148, tp=-1, tpl=-1, uplat=25, ullat=0

X-Fb-Debug

Other

wEQKNW+1w1KCwTbGPtyYF7V5bld55aS8DHai0pSoxze/cyCLKS70Sl0QjMtGHdYM3DP2LhqvNYr2h2HuMxScAQ==

X-Fb-Request-Id

Other

ADMDPBnBZ5hS_nvlbi8Zy8i

X-Fb-Rev

Other

1038997155

X-Fb-Trace-Id

Other

GhOduLPZlAW

X-Stack

Other

www

alt-svc: h3=":443"; ma=86400
date: Thu, 07 May 2026 13:49:17 GMT
debug-link: https://www.meta.com/debug/?mid=31b160a10b1aab8706548940e2b07763
error-mid: 31b160a10b1aab8706548940e2b07763
proxy-status: http_request_error; e_fb_vipaddr="AcQXsXLV4Dd_CQjvnQGLw-lTdQM9bZo3uL4qidLNNH886MA-TNNID-dVIwWNyQBg0KGKZRuuNj30MB7HUZScZ6Z6eSEDQ9LMYdedEGu9"; e_clientaddr="AcQuZEBK6W8NCGRESqBC0WqtZmt8IXREDHR6roKKiPLXN7eIVc1ZPLiJYq5238ZVABBfuJKoO26FuAiTc2hWy1WT4qQ4O0MU90yqz9EovsVMynxrEw"; e_upip="AcSDNUTRMieP8Qum2W0mEU187ziq4jFoJGjMpsV9hkbNOGsdxj9tiVsWqikp1OIKXhFNuUC7JaXyNOPNYTguDSLAWBHHAJ1PZ7RRL7KOHw"; e_fb_zone="AcRNsiCBr7XQotHMMp0kjT_5Q8WaYycw8iLU44ZL6mfqhn1fVhb-Kr1bNc2J3Y0C"; e_fb_twtaskhandle="AcQYmhfsdTrep1htCAvpNgFYqhYbkX1Fp928bJgSVxXAKl7wivhx5j8p1XCx_cYrJfU8kluH3Tex5WKSwDvK3r2yxYbE5EIvRHtise9tZA"; e_proxy="AcQy13uZUA7cSDLK8c6K_7HLXhFcOKLKfxtv1mK41mXKcsiQMEL7KYZuJOP9GydnEVLTQsRbYbDupbryzZls", http_request_error; e_fb_vipaddr="AcSmGL5frOnJrrVSr5U7fJJIn05-MSDYwEPePGO6tc5g6MT_MVplL1NxyTSpdLAQ-Nl4lUqQ"; e_clientaddr="AcTcEvzMIskQrc_xE7D4vSZoE9iSQ7pHZDjF9PWTLVceT7hcep8KXnrCYjYTzNNweBn5PduYHebNqm_e"; e_upip="AcQYMdA5caoznhd1yTwEwhL3KA3fIYOXpvmBuA8Fhtko8Mrb2Eoop-9fzlQczrD2Dzf1dSJLBO6BFXj15Z3y84lWiXsFdq2IawuF5ILe"; e_fb_zone="AcS8ThzWWiIJnGkELthRFAYebVAPCuEFSCYHcz1i35dt7bBzPtpj82DqJhkkVg"; e_fb_twtaskhandle="AcQsmwMKiEgj_F-48n2eXibZnpKztL0nJEelqN-tSTTKwKX2RFftowZ33VIYjN1KEl7QhMjXmygKt5Ch7E-gPX0PSR84J6we0A9H"; e_proxy="AcTExAz1-STd6xKiPlv5smgknenH-zdx-8x5vk9RoBJRe6ktYUlEksM9rJligBdb2V8okTP_1xm00Qc"
www-authenticate: OAuth "Facebook Platform" "invalid_request" "Invalid OAuth 2.0 Access Token"
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=1, rtx=0, c=13, mss=1368, tbw=3148, tp=-1, tpl=-1, uplat=25, ullat=0
x-fb-debug: wEQKNW+1w1KCwTbGPtyYF7V5bld55aS8DHai0pSoxze/cyCLKS70Sl0QjMtGHdYM3DP2LhqvNYr2h2HuMxScAQ==
x-fb-request-id: ADMDPBnBZ5hS_nvlbi8Zy8i
x-fb-rev: 1038997155
x-fb-trace-id: GhOduLPZlAW
x-stack: www

Recommendations

Enable compression (gzip/brotli) to improve performance