DNS Gurus
Cached · just now
12 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=2592000
Content-Security-Policy
Weak
frame-ancestors
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer
Permissions-Policy
Missing
Not configured
Recommendations
  • • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • • Significantly strengthen CSP directives
  • • Consider adding Permissions-Policy to control browser features

Performance Headers

1 headers
Connection
Performance
close

Caching Headers

0 headers
No caching headers found

Content Headers

1 headers
Content-Length
Content
0

Server Headers

0 headers
No server headers found

CORS Headers

0 headers
No CORS headers found

Cookies Headers

0 headers
No cookies headers found

Other Headers

5 headers
Citrix-Transactionid
Other
297ada45-c65c-4aa3-a55d-b56e1ff154b9
Content-Security-Policy-Report-Only
Other
default-src 'self'; base-uri 'self'; connect-src https:; frame-ancestors 'self'; font-src https:; form-action 'self'; object-src 'none'; img-src 'self' https: data:; script-src 'nonce-2+QbqB+tn5daI5EnbnNMa4fMbaJT5U6Wwu6X59YLYV0=' 'unsafe-inline' 'strict-dynamic' 'report-sample' https: googletagmanager.com google-analytics.com app.pendo.io cdn.pendo.io data.pendo.io pendo-io-static.storage.googleapis.com citrix-cloud-content.customer.pendo.io citrix-cloud-data.customer.pendo.io pendo-static-6508245000126464.storage.googleapis.com; style-src 'unsafe-inline' 'report-sample'; worker-src 'none'; manifest-src 'none'; report-uri /csp/reports;
Date
Other
Sun, 01 Feb 2026 18:04:41 GMT
X-Ath-Sessionid
Other
4a4139f3-b621-4f4e-817c-7c5c93881301
X-Ath-Transactionid
Other
297ada45-c65c-4aa3-a55d-b56e1ff154b9

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching