HTTP Headers Analysis for https://konabigwave.com

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000 ; includeSubDomains ; preload

Content-Security-Policy

Weak

upgrade-insecure-requests; frame-ancestors

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

2 headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Caching Headers

1 headers

Etag

Caching

"1b7xw9o"

Content Headers

1 headers

Content-Type

Content

text/html

Server Headers

0 headers

No server headers found

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

Cookies

incap_ses_1607_2917715=DHSVesTPrwek5BGtijZNFsn8cmkAAAAAdk0y357ozLaMRGTEWQuV5w==; path=/; Domain=.konabigwave.com; Secure; SameSite=None

Other Headers

7 headers

Date

Other

Fri, 23 Jan 2026 04:44:57 GMT

Link

Other

<./_app/immutable/assets/sanitize.NYDdTvQ8.css>; rel="preload";as="style"; nopush, <./_app/immutable/assets/ProgramsCarousel.D8T4Fu8X.css>; rel="preload";as="style"; nopush, <./_app/immutable/assets/componentRegistry.hXwXWQB0.css>; rel="preload";as="style"; nopush, <./_app/immutable/assets/0.DHgvOED_.css>; rel="preload";as="style"; nopush, <./_app/immutable/entry/start.BXcWIkVz.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/BZswAJa4.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/CoLcJXqk.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/DVU2g_vk.js>; rel="modulepreload"; nopush, <./_app/immutable/entry/app.D78ZbI55.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/C1FmrZbK.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/IHki7fMi.js>; rel="modulepreload"; nopush, <./_app/immutable/nodes/0.DwUohuuo.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/Bt-Xh7oU.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/C_YRydtG.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/DZQL4G0w.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/DLsAKNK8.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/CW3a3owy.js>; rel="modulepreload"; nopush, <./_app/immutable/chunks/DcbJcyw2.js>; rel="modulepreload"; nopush, <./_app/immutable/nodes/6.DFs2rtFT.js>; rel="modulepreload"; nopush

X-Cdn

Other

Imperva

X-Iinfo

Other

48-101253269-101253271 NNNN CT(9 30 0) RT(1769143497452 8) q(0 0 1 4) r(1 7) U12

X-Ms-Invocation-Id

Other

797c4c98-dddc-4a74-ae17-ba6b5f183749

X-Ms-Middleware-Request-Id

Other

35c7d6d6-b842-44a3-9aae-acec7c470897