HTTP Headers Analysis for https://keytodata.com

Detected Technologies from Headers

See all in URL Inspect 2

Cloudflare CDN

W3 Total Cache

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

3 headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

Caching Headers

4 headers

Cache-Control

Caching

max-age=3600, public

Expires

Caching

Fri, 13 Feb 2026 11:41:20 GMT

Last-Modified

Caching

Fri, 13 Feb 2026 10:41:20 GMT

Pragma

Caching

public

Content Headers

1 headers

Content-Type

Content

text/html; charset=UTF-8

Server Headers

2 headers

Server

cloudflare

X-Powered-By

Server

W3 Total Cache/2.9.1

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

Cookies

__cf_bm=osyajLR6ljdGZ3yKDqK7UBao9aOA3sQ.4M8hwHXsO7U-1770979280-1.0.1.1-cGxXp0xwACqD3nrwg2ffqBrsH6defyz.UtqVEcLQ6Ls4H7vAwobjA64eT6vygRojX.CuGquV4IjKtReHCelKKIlyn5FH7GiI5bMr1W9vn4k; path=/; expires=Fri, 13-Feb-26 11:11:20 GMT; domain=.keytodata.com; HttpOnly; Secure; SameSite=None