HTTP Headers Analysis for https://hypixel.net

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Weak

connect-src; img-src; frame-ancestors

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

accelerometer=(), autoplay=(), camera=(), document-domain=(), encrypted-media=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=(), publickey-credentials-get=("https://hypixel.net")

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives

Performance Headers

3 headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

Caching Headers

4 headers

Age

Caching

14

Cache-Control

Caching

public, max-age=0, s-maxage=30, no-store

Expires

Caching

Mon, 26 Jan 2026 14:25:39 GMT

Last-Modified

Caching

Mon, 26 Jan 2026 14:25:09 GMT

Content Headers

1 headers

Content-Type

Content

text/html; charset=utf-8

Server Headers

1 headers

Server

cloudflare

CORS Headers

1 headers

Access-Control-Allow-Origin

Cors

https://hypixel.net

Cookies Headers

0 headers

No cookies headers found

Other Headers

6 headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Cache-Status

Other

HIT

Cf-Ray

Other

9c40ae0b180c5788-IAD

Date

Other

Mon, 26 Jan 2026 14:25:28 GMT

Link

Other

<https://static.cloudflareinsights.com>; rel="preconnect", <https://ajax.googleapis.com>; rel="preconnect", <https://staticassets.hypixel.net>; rel="preconnect", <https://forumassets.hypixel.net>; rel="preconnect", <https://www.googletagmanager.com>; rel="preconnect"

Speculation-Rules

Other

"/cdn-cgi/speculation"

Recommendations

Enable compression (gzip/brotli) to improve performance