29 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=31536000; preload; includeSubDomains
Content-Security-Policy
Basic
default-src; script-src; style-src; +10 more Analyze
Content-Security-Policy-Report-Only
Good
default-src; script-src; style-src; +10 more Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
accelerometer=(self), attribution-reporting=(), autoplay=(); +44 more
Recommendations
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

Performance Headers

Connection
Performance
close
Vary
Performance
Accept-Encoding

Caching Headers

Cache-Control
Caching
private, no-cache, no-store, must-revalidate
Expires
Caching
Sat, 01 Jan 2000 00:00:00 GMT
Pragma
Caching
no-cache

Content Headers

Content-Length
Content
0
Content-Type
Content
text/html; charset="utf-8"

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie
Cookies

Other Headers

Alt-Svc
Other
h3=":443"; ma=86400
Cross-Origin-Embedder-Policy-Report-Only
Other
require-corp;report-to="coep_report"
Date
Other
Sat, 22 Aug 2026 22:18:00 GMT
Document-Policy
Other
force-load-at-top, include-js-call-stacks-in-crash-reports
Origin-Agent-Cluster
Other
?1
Origin-Trial
Other
ArDvqjFKr1fHThlSM8Kkp74sxlOCFTeqYJMXCGqCG/VJmcYlO/0UavmpqPDit2KppDf1THInNpwA36GmtgPOug8AAAB2eyJvcmlnaW4iOiJodHRwczovL3d3dy5pbnN0YWdyYW0uY29tOjQ0MyIsImZlYXR1cmUiOiJDcmFzaFJlcG9ydGluZ1N0b3JhZ2VBUEkiLCJleHBpcnkiOjE3NzY3Mjk2MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==
Proxy-Status
Other
http_request_error; e_proxy="AcSf3uPiLl3nRIsJ9kqa145NskYLLQ0KI5kNHz9m9plZDQQCsa60wYZjeMH9rBkZZJPJrK0ntSky4GfSRwM"; e_fb_twtaskhandle="AcSHTU3DQICW0OKt34vxNoQeG782ja_N2MGelyE2NF1on5MDgGai9N7Zb6JUVTd0DXLs2MRfWXrcmT46mj_bOReA6BUoB8T0oioiqc0Clg"; e_upip="AcTTDFwsYx8M_EVT6fWu8tkcxwkQjR86EkfWVpltbvrRCvT3Z_ZDgz9Sg70aASKbL5WaIu-OC48bRG9MoEDi-VOlwxhbH1TxpfeoZofFsVM"; e_fb_zone="AcRZcLb2eJwdQSi1rP4aoJ5nAEP6RdQFmKUEgwOCobBePo7Fiuv1Jsipf7fyLHWO"; e_clientaddr="AcQSD848jO4oRgHdnHZJl7XOtgzV30crKXUIJ-DKRw46IibKCXR0BhmqWpEZfnfD9yCm2I-grfiqITl8mkBFBC4S5fapyqTd6BLC7wtuRF3gj2yfiw"; e_fb_vipaddr="AcTHo6knVi2M6-iatD-QVu0cDv3AEqJW51qf7fFTWx70lBwlRbW7X6r-S64fyd0R_B4xvzChIOXdZUoj3uTXypVKYO2CFBiaegmXsVnM", http_request_error; e_proxy="AcTbofBvB4xxp-eVjPGsnc-Z8-tNn4X3Z0Vh5W8Tz0ptJ-ryUflmbHUxQTJIUE4_cQLxKPOEs6Kk4dTO"; e_fb_twtaskhandle="AcRfq9jTSimbX-kRDmM24DbWYPZisniQm5HAbQLZ4zKsL_3Za7DBoIwxTbqLyd5rV2qRVgyd6F_avt6Nz3_uy8D86uzdBn5G-Nf7"; e_upip="AcQ7ucXRG9NL0goKAP7RlTPZRqlfI4rXqezFukQKRTFaPnYMy9JCjRNDJdMsq1ofp6BM5bDl42DPlW1oWkMUrJT35rjSLwRwObmA45r4"; e_fb_zone="AcRiYzeASVPVIhBHQBq_xFCuVKRImzm1fH7xMbToWROombgO1Qq7lAVegX5Mwg"; e_clientaddr="AcRnCtlIxZxfymT228S6hwcjHYh9H5SOO06P26kgX9QZ1rVB-EtPoe7vahV_u0V2xlI8xpC55uRkWWgs8g"; e_fb_vipaddr="AcQz9gTFPGrOGjTgJY1iUU9dGPdxFmtOrKwnKMZHZ_y9XCixFvzGAIvv4l8SzjqAd_hBrms2"
Reporting-Endpoints
Other
coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.instagram.com/error/ig_web_error_reports/?device_level=unknown&brsid=7676983803515582150&cpp=C3&cv=1045817645&st=1787437080781"
X-Fb-Connection-Quality
Other
EXCELLENT; q=0.9, rtt=13, rtx=1, c=13, mss=1368, tbw=3531, tp=-1, tpl=-1, uplat=67, ullat=0
X-Fb-Debug
Other
jRD7vVtjctqqprESQTC85YJ9NTallEKCWgtzvYOuG+ojGTYuuqhmDGrVwjwhYYKm8Acblbi7Tvwz8vzG7BsTAA==
X-Stack
Other
www

Recommendations

Enable compression (gzip/brotli) to improve performance