Open
Cached
·
just now
27
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31536000; preload; includeSubDomains
Content-Security-Policy
Basic
default-src; script-src; style-src; +10 more
default-src *.facebook.com *.fbcdn.net *.instagram.com blob:;script-src *.instagram.com static.cdninstagram.com *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-HV2r22MF' blob: 'self' 'unsafe-eval' https://*.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src *.instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' *.fbcdn.net *.facebook.com;connect-src *.instagram.com wss://edge-chat.instagram.com connect.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* ws://localhost:* blob: *.cdninstagram.com wss://*.instagram.com:* 'self' https://meta.privacy-gateway.cloudflare.com/relay;font-src *.instagram.com static.cdninstagram.com data: *.fbcdn.net *.intern.facebook.com *.facebook.com https://fonts.gstatic.com;img-src *.instagram.com *.facebook.com *.fbcdn.net data: *.cdninstagram.com *.whatsapp.net blob: *.fbsbx.com android-webview-video-poster: *.oculuscdn.com *.giphy.com *.tenor.co *.tenor.com www.googleadservices.com *.doubleclick.net *.google.com *.google.co.uk https://www.gstatic.com https://*.google-analytics.com;media-src *.facebook.com *.fbcdn.net *.instagram.com *.cdninstagram.com *.fbsbx.com data: blob: https://*.giphy.com *.tenor.co *.tenor.com;child-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;frame-src *.instagram.com *.facebook.com *.fbsbx.com fbsbx.com data: www.googleadservices.com *.doubleclick.net *.google.com *.google.co.uk;manifest-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;object-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;block-all-mixed-content;upgrade-insecure-requests;
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
accelerometer=(self), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(self), gyroscope=(self), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(self), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
Recommendations
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
Performance Headers
2 headers
Connection
Performance
close
Vary
Performance
Accept-Encoding
Caching Headers
3 headers
Cache-Control
Caching
private, no-cache, no-store, must-revalidate
Expires
Caching
Sat, 01 Jan 2000 00:00:00 GMT
Pragma
Caching
no-cache
Content Headers
2 headers
Content-Length
Content
0
Content-Type
Content
text/html; charset="utf-8"
Server Headers
0 headers
No server headers found
CORS Headers
0 headers
No CORS headers found
Cookies Headers
0 headers
No cookies headers found
Other Headers
12 headers
Alt-Svc
Other
h3=":443"; ma=86400
Content-Security-Policy-Report-Only
Other
default-src *.facebook.com *.fbcdn.net *.instagram.com blob:;script-src *.instagram.com static.cdninstagram.com *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-HV2r22MF' blob: 'self' https://*.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com 'report-sample';style-src *.instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' *.fbcdn.net *.facebook.com;connect-src *.instagram.com wss://edge-chat.instagram.com connect.facebook.net *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* ws://localhost:* blob: *.cdninstagram.com wss://*.instagram.com:* 'self' https://meta.privacy-gateway.cloudflare.com/relay;font-src *.instagram.com static.cdninstagram.com data: *.fbcdn.net *.intern.facebook.com *.facebook.com https://fonts.gstatic.com;img-src *.instagram.com *.facebook.com *.fbcdn.net data: *.cdninstagram.com *.whatsapp.net blob: *.fbsbx.com android-webview-video-poster: *.oculuscdn.com *.giphy.com *.tenor.co *.tenor.com www.googleadservices.com *.doubleclick.net *.google.com *.google.co.uk https://www.gstatic.com https://*.google-analytics.com;media-src *.facebook.com *.fbcdn.net *.instagram.com *.cdninstagram.com *.fbsbx.com data: blob: https://*.giphy.com *.tenor.co *.tenor.com;child-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;frame-src *.instagram.com *.facebook.com *.fbsbx.com fbsbx.com data: www.googleadservices.com *.doubleclick.net *.google.com *.google.co.uk;manifest-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;object-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;block-all-mixed-content;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
Date
Other
Fri, 02 Jan 2026 06:47:27 GMT
Document-Policy
Other
include-js-call-stacks-in-crash-reports
Origin-Agent-Cluster
Other
?1
Origin-Trial
Other
ArDvqjFKr1fHThlSM8Kkp74sxlOCFTeqYJMXCGqCG/VJmcYlO/0UavmpqPDit2KppDf1THInNpwA36GmtgPOug8AAAB2eyJvcmlnaW4iOiJodHRwczovL3d3dy5pbnN0YWdyYW0uY29tOjQ0MyIsImZlYXR1cmUiOiJDcmFzaFJlcG9ydGluZ1N0b3JhZ2VBUEkiLCJleHBpcnkiOjE3NzY3Mjk2MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==
Proxy-Status
Other
http_request_error; e_fb_vipaddr="AcNjPVjFS1bKt7ruPSZxviKGDwCqLa8BneNj3g8zEcsY2jD9FgxK5GEaxCqi82eFUR-Bxdn688UtOUwgd45IQqcDYJiPQZJohWK7B9Y3"; e_clientaddr="AcMlZdZqUFg1XgrhOfeWlyJAbjcDAH7CRYb0tYnKuGDCT-ZIXC5w442Fu-Rc2Xen4F4JUvBdkstTc7T4Wc6X16N_DdTLP6w8OJvnfHyR__rFO784"; e_upip="AcNLYfiv9gcPU1XbWT2HEMadt6aD3id-k2lbYn_75z-HyW9nwbwqpvLNZeKKwuSB9dDEjmmJ3ewB2q96WbVKebxtXu7eWkYuBlyOLQfRD3Q"; e_fb_zone="AcOK9-5-wo4Op9DSnWAhujn9L7ozhb_SSn_MPqTDnx92f4kYO6q_iTATLfX8s5BE"; e_fb_twtaskhandle="AcNy2YqJ6G1QrljQ4-vrmgbrSZ7t8HO-Mb5yhzRI_emf7XMWrOy2x0wa2hqDugapPOgpGQutQPS7KE5s_tMYIOMUNulefFOubtA594XidA"; e_proxy="AcOfC6_T9fVMxMuwL7F6akIDCJVcbYCTnVZWeR_ZM9J3CxMyR-lYamSZDH8u2PJiDc8FouolvrsIyV6nZH-H", http_request_error; e_fb_vipaddr="AcMWiobODpep3KxDl5P5-WCxYfbsFHjF0yWxAiwUr1eB7j5pkpPbI_z7SO-hbwVnOWbkzoC3"; e_clientaddr="AcMO0asStIcrVow5lYRQV3NCwgpZKIwvGOT_FRH-06s6Js-DtfqGHUmchPv1ut2Fsa1U3avCzkRh8Eg"; e_upip="AcM1wW7tyXv9AbW8s679kzJ2dwF7r9_BNlWP2cmNqSWdZ-HlGXtkbC5mWOD7dbvVi9a72IgTAEQ2d8d0lLodHShzoEmD6hR1uxgHKgCt"; e_fb_zone="AcOrBY7PiWGD9HYMBnwgketDNlSeSs9V3MiBs4PRE7yIihEIxy65FYX0cfRS9Q"; e_fb_twtaskhandle="AcP-itaoEV-VDkaLakWU60Z0xszXSpUVvfRabpEqKeZgyRQai5090X8moEnr0iNyLaeVyGbAAmKafamFpcxt7Dk8PXuUrFeiBLPj"; e_proxy="AcPBIqzveOGh8_N8pY0RUWlgFkp2cmvTVn0N0kVYGfNZqgeJp0hnntR9J0KsuW3DeCP9XXMBzW4bnbGt"
Report-To
Other
{"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.instagram.com\/error\/ig_web_error_reports\/?device_level=unknown&brsid=7590652242462868430&cpp=C3&cv=1031564426&st=1767336447086"}]}
Reporting-Endpoints
Other
coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.instagram.com/error/ig_web_error_reports/?device_level=unknown&brsid=7590652242462868430&cpp=C3&cv=1031564426&st=1767336447086"
X-Fb-Connection-Quality
Other
UNKNOWN; q=-1, rtt=-1, rtx=0, c=13, mss=1368, tbw=3543, tp=-1, tpl=-1, uplat=55, ullat=0
X-Fb-Debug
Other
WgETu72gTAjWGARwyFUhmMthE7CgxumOmE7uYBcMhfZ/7XHzAP/ctaqpV2HmSv3j8AAXkNh0wyOUTIoonyy8Gg==
X-Stack
Other
www
Recommendations
Enable compression (gzip/brotli) to improve performance