HTTP Headers Analysis for https://kialo.com

Detected Technologies from Headers

See all in URL Inspect 6

YouTube

Akamai

AWS CloudFront

Google Fonts

Sentry

Wistia

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Good

default-src; script-src; style-src; +9 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

fullscreen=(*), attribution-reporting=(), bluetooth=(); +4 more

Recommendations

• Strengthen CSP by removing 'unsafe-eval'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

connection: close
transfer-encoding: chunked
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

no-cache, no-store

cache-control: no-cache, no-store

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _xsrf=2|961642ce|199e1540e075b23ccc7b3d54cad1cc7a|1778099789; Partitioned; Path=/; SameSite=None; Secure
url_user_language=en; Path=/

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Date

Other

Wed, 06 May 2026 20:36:29 GMT

Nel

Other

Report-To Group default max-age: 1d

Report-To

Other

Group default max-age: 1d

Endpoint 1 https://www.kialo.com/api/v1/report

Reporting-Endpoints

Other

default="https://www.kialo.com/api/v1/report"

Via

Other

1.1 a4a1a8623588f9bc9a574eed729d35de.cloudfront.net (CloudFront)

X-Amz-Cf-Id

Other

fneM-K6qiYgQRRFJNbmxVHJOMW4zjYfzM-RyxnIf0rnw3WgSMiifsA==

X-Amz-Cf-Pop

Other

IAD55-P6

X-Cache

Other

Miss from cloudfront

X-Cookieless-Data

Other

{"url_user_language": "en"}

X-Kialo-Version

Other

buildtag-stable-1215

alt-svc: h3=":443"; ma=86400
date: Wed, 06 May 2026 20:36:29 GMT
nel: {"report_to":"default","max_age":86400}
report-to: {"endpoints":[{"url":"https://www.kialo.com/api/v1/report"}],"max_age":86400}
reporting-endpoints: default="https://www.kialo.com/api/v1/report"
via: 1.1 a4a1a8623588f9bc9a574eed729d35de.cloudfront.net (CloudFront)
x-amz-cf-id: fneM-K6qiYgQRRFJNbmxVHJOMW4zjYfzM-RyxnIf0rnw3WgSMiifsA==
x-amz-cf-pop: IAD55-P6
x-cache: Miss from cloudfront
x-cookieless-data: {"url_user_language": "en"}
x-kialo-version: buildtag-stable-1215

Recommendations

Enable compression (gzip/brotli) to improve performance