HTTP Headers Analysis for https://lendyr.com

Detected Technologies from Headers

See all in URL Inspect 1

Akamai

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Weak

upgrade-insecure-requests Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

max-age=303

Etag

Caching

"6824c6b975190b4434b07aa6031856d6:1759160438.397341"

Expires

Caching

Sun, 26 Apr 2026 07:42:16 GMT

Last-Modified

Caching

Mon, 29 Sep 2025 15:40:38 GMT

cache-control: max-age=303
etag: "6824c6b975190b4434b07aa6031856d6:1759160438.397341"
expires: Sun, 26 Apr 2026 07:42:16 GMT
last-modified: Mon, 29 Sep 2025 15:40:38 GMT

Content Headers

Content-Length

Content

1672

Content-Type

Content

text/html

content-length: 1672
content-type: text/html

Server Headers

Server

AkamaiNetStorage

server: AkamaiNetStorage

CORS Headers

Access-Control-Allow-Credentials

Cors

false

Access-Control-Allow-Headers

Cors

*

Access-Control-Allow-Methods

Cors

GET,POST, OPTIONS

Access-Control-Allow-Origin

Cors

*

Access-Control-Max-Age

Cors

86400

access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 86400

Cookies Headers

Set-Cookie

Cookies

set-cookie: _abck=5F9B30ADC69BBAB3A73A4ED69CB7C3C8~-1~YAAQygwDF56qJHGdAQAA3pa4yA97mjUrYVd63kR9MJi86lP1aKCFnysE/we6KqTtWDpK7+uSOCidyfDleEe8hx6xs1l/D4BIBiWGGizNS62Z8r2a+LrUTUiQIAIBFhVUVxifLRYsy2epWlUoVrRafi2lJra26qMr9UdsLgJC8zrv88h07quSN+LY8gGRNg108ClzICKkoKotdCXUnNNzOPWpaSbDSEA7/vpIwDKKFGKHdu0Q2pJWNYI525EcD19pXi1XchXmHLkNLj3BtJX22n+6tuaX6Cbt5qMXJodP1B0aUEGvXCxTzekrM1ZWNy3QlGSdp4sVy0rhB390tfzZcj69nV40Xa3a3yPYZ8uLAaJXqqp2GhWpvdJXt+zEfR8c5hVO54UcAct1KNFRzpIRCbha7/ajLc94lF6K35k7MYaD9B0IvkFIPkLBEvMF7BFXMXQ=~-1~-1~-1~-1~-1; Domain=.ibm.com; Path=/; Expires=Mon, 26 Apr 2027 07:37:13 GMT; Max-Age=31536000; Secure
bm_sz=0B0901A69B9369395D360DBF91448926~YAAQygwDF5+qJHGdAQAA3pa4yB8XL0DRW02J+Sv4nGtJV+h2TZNqiwQwKUFESBGB+V0gmCSq1MreWmw3xVZQiJhnkaZusNyvAPJwNkp+V06hCA29SuS9hk5SDsFp7F/FFmwCR9kgwlD+F/1xuCSx4P08uv4EMhqSgEwIJc85vKMUHkO5imJtz4LjdHM+28Et05b6lliQHtOhrWGkOX/T+3gl+WSVQpTn/fRbJJOJUuJp88FGl5sy9h/WxpTpuayOLkJwb+BqTCc7cFS9SNv05kTz1G/I+cKEKk8EZW6reSDpGTMH2K0VgR/L/1l2SXl1QuCd7L7dF5aIeh9QKmh0SLACAicpiKAS/UXt~4338501~4404036; Domain=.ibm.com; Path=/; Expires=Sun, 26 Apr 2026 11:37:13 GMT; Max-Age=14400

Other Headers

Date

Other

Sun, 26 Apr 2026 07:37:13 GMT

X-Akamai-Transformed

Other

0 - 0 -

date: Sun, 26 Apr 2026 07:37:13 GMT
x-akamai-transformed: 0 - 0 -

Recommendations

Enable compression (gzip/brotli) to improve performance