HTTP Headers Analysis for https://it.gauthmath.com

Detected Technologies from Headers

See all in URL Inspect 17

Akamai Active incidents

Bing

Facebook

Gauthmath

Google Analytics

Google Conversion Tracking

Google DoubleClick

Google Search

Google Static File Front End

Google Tag Manager

Microsoft Clarity

Nginx

TikTok

TikTok Analytics

YouTube

Google Cloud

Google Cloud Storage

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000 ; includeSubDomains

Content-Security-Policy

Basic

report-uri; report-to; upgrade-insecure-requests; +8 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store

Expires

Caching

Fri, 01 May 2026 13:45:27 GMT

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store
expires: Fri, 01 May 2026 13:45:27 GMT
pragma: no-cache

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

Server

nginx

X-Powered-By

Server

Goofy Node

server: nginx
x-powered-by: Goofy Node

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _region=us; Max-Age=259200000; Domain=.gauthmath.com; Path=/
app_region=us; Max-Age=259200000; Domain=.gauthmath.com; Path=/
_continent=us; Max-Age=259200000; Domain=.gauthmath.com; Path=/
_subdivision=us; Max-Age=259200000; Domain=.gauthmath.com; Path=/
_city=us; Max-Age=259200000; Domain=.gauthmath.com; Path=/
device_id=7634919073566000654; Domain=.gauthmath.com; Path=/; Expires=Thu, 30 Jul 2026 13:45:27 GMT
ttwid=1%7CfqPcLhYrCyk5O6xXK096CHt4D82m46EBB4Kpx9qVkoY%7C1777643127%7C397e863e4a2f540e86276798fc54282051fc7f266b4970ec1f6fe7e0b4024692; Domain=.gauthmath.com; Path=/; Expires=Thu, 30 Jul 2026 13:45:27 GMT

Other Headers

Date

Other

Fri, 01 May 2026 13:45:27 GMT

Reporting-Endpoints

Other

csp-endpoint="https://mon.gauthai-us.com/monitor_browser/collect/batch/security/?bid=EHI_H5&ev_type=csp&p=jMJf6k1GY6BA4KbmDVSsTh&v=3&s=657&b=oab"

Server-Timing

Other

inner; dur=480,bd-edenx-server-loader-(region$)/layout; dur=0, bd-edenx-server-loader-layout; dur=14.999867, bd-edenx-server-loader-(region$)/page; dur=279.000044, bd-edenx-server-loader;decs="SSR"; dur=282.000065, bd-edenx-ssr-render-html;decs="SSR"; dur=84.000111, bd-edenx-server-handle-request; dur=469.000101, cdn-cache; desc=MISS, edge; dur=1, origin; dur=571

X-Akamai-Request-Id

Other

6c232fc6

X-Bytefaas-Enable-Stream

Other

true

X-Bytefaas-Execution-Duration

Other

472.61

X-Bytefaas-Request-Id

Other

2026050113452757C8A7AA608570262DEE

X-Cache

Other

TCP_MISS from a23-33-214-124.deploy.akamaitechnologies.com (AkamaiGHost/22.5.1-f3772c509bd97e9cbf399eab359b9b92) (-)

X-Ggw-Config-Version

Other

432061

X-Gw-Dst-Psm

Other

ehi.fe.portal_web_ttp_gs

X-Modernjs-Render

Other

server

X-Origin-Response-Time

Other

572,23.33.214.124

X-Processed-By

Other

Modern.js

X-Tt-Logid

Other

2026050113452757C8A7AA608570262DEE

X-Tt-Trace-Host

Other

01cf956d9198ef431cf8db7ccac30f1a78430724488e20c5f645d2e00ec1e528f5c0c9f65312444c8c3508079b10f653ec1b8ee69d931b3bd2339f471a3b98776cb7a11a39e4e5e5944381e6f00169d8a99234c20f211139b90e2e53fa84a1d298

X-Tt-Trace-Id

Other

00-26050113452757C8A7AA608570262DEE-6ABE7EC669411E0B-00

X-Tt-Trace-Tag

Other

id=16;cdn-cache=miss;type=dyn

date: Fri, 01 May 2026 13:45:27 GMT
reporting-endpoints: csp-endpoint="https://mon.gauthai-us.com/monitor_browser/collect/batch/security/?bid=EHI_H5&ev_type=csp&p=jMJf6k1GY6BA4KbmDVSsTh&v=3&s=657&b=oab"
server-timing: inner; dur=480,bd-edenx-server-loader-(region$)/layout; dur=0, bd-edenx-server-loader-layout; dur=14.999867, bd-edenx-server-loader-(region$)/page; dur=279.000044, bd-edenx-server-loader;decs="SSR"; dur=282.000065, bd-edenx-ssr-render-html;decs="SSR"; dur=84.000111, bd-edenx-server-handle-request; dur=469.000101, cdn-cache; desc=MISS, edge; dur=1, origin; dur=571
x-akamai-request-id: 6c232fc6
x-bytefaas-enable-stream: true
x-bytefaas-execution-duration: 472.61
x-bytefaas-request-id: 2026050113452757C8A7AA608570262DEE
x-cache: TCP_MISS from a23-33-214-124.deploy.akamaitechnologies.com (AkamaiGHost/22.5.1-f3772c509bd97e9cbf399eab359b9b92) (-)
x-ggw-config-version: 432061
x-gw-dst-psm: ehi.fe.portal_web_ttp_gs
x-modernjs-render: server
x-origin-response-time: 572,23.33.214.124
x-processed-by: Modern.js
x-tt-logid: 2026050113452757C8A7AA608570262DEE
x-tt-trace-host: 01cf956d9198ef431cf8db7ccac30f1a78430724488e20c5f645d2e00ec1e528f5c0c9f65312444c8c3508079b10f653ec1b8ee69d931b3bd2339f471a3b98776cb7a11a39e4e5e5944381e6f00169d8a99234c20f211139b90e2e53fa84a1d298
x-tt-trace-id: 00-26050113452757C8A7AA608570262DEE-6ABE7EC669411E0B-00
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology