Open
Cached
·
just now
21
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31556952; includeSubDomains
Content-Security-Policy
Basic
default-src; base-uri; connect-src; +9 more
X-Frame-Options
Good
sameorigin
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Consider adding Permissions-Policy to control browser features
Performance Headers
1 headers
Connection
Performance
keep-alive
Caching Headers
2 headers
Cache-Control
Caching
no-store
Etag
Caching
W/"ee7b4ff077db60e2f91e95ed5a4b9f8f"
Content Headers
2 headers
Content-Length
Content
7439
Content-Type
Content
text/html; charset=utf-8
Server Headers
1 headers
X-Runtime
Server
0.014812
CORS Headers
0 headers
No CORS headers found
Cookies Headers
1 headers
Set-Cookie
Cookies
_clio-identity_session=Za8chLBsLVXZFMIewNQUGN7rv6zOiLlZVm2ERgg64193yzNgXMAt9v0ZF9wzSU5C4JG%2Bd1KdeMIAxirmkUVNa0cxNa%2FXJiHul4DIrSxJ%2F%2F4JoHCuGAjCmsrcRVXinVAWqWHNlniwKAvRfw3NZQb0%2F8OP5FnYPeS4ynP9kZAbeJXv2f%2BCcyPfxtLBq%2FMB5b8IZUT4eD2njhCu42oVskds1busu2glNzYIXSVVqCKgynLiloAGOXPFwvEkUB%2FF%2B%2F4Xbxj5b8QDBerfcdS38sR4c%2BDzaYb71dG%2FrQnZzs6X--7oNOSvwNVyY857yX--6TxSas%2Bg5Cew4laQhKa3nw%3D%3D; path=/; secure; HttpOnly; SameSite=Lax
Other Headers
8 headers
Date
Other
Thu, 06 Nov 2025 22:11:21 GMT
Link
Other
</assets/application-a6165221f0b1f145b9d159e4b42078df8fd94de09ca92d159d2d3df2f711e2be.css>; rel=preload; as=style; nopush
X-Download-Options
Other
noopen
X-Permitted-Cross-Domain-Policies
Other
none
X-Ratelimit-Limit
Other
750
X-Ratelimit-Remaining
Other
749
X-Ratelimit-Reset
Other
1762467300
X-Request-Id
Other
5c430dfb-bc01-4782-84e6-f67bcd7d0478
Recommendations
Enable compression (gzip/brotli) to improve performance
Analysis completed in 381ms