DNS Gurus
Cached · just now
12 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=2592000
Content-Security-Policy
Weak
frame-ancestors
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer
Permissions-Policy
Missing
Not configured
Recommendations
  • • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • • Significantly strengthen CSP directives
  • • Consider adding Permissions-Policy to control browser features

Performance Headers

1 headers
Connection
Performance
close

Caching Headers

0 headers
No caching headers found

Content Headers

1 headers
Content-Length
Content
0

Server Headers

0 headers
No server headers found

CORS Headers

0 headers
No CORS headers found

Cookies Headers

0 headers
No cookies headers found

Other Headers

5 headers
Citrix-Transactionid
Other
5e23d0e0-dee8-4c84-aa6e-f7986c40fcc4
Content-Security-Policy-Report-Only
Other
default-src 'self'; base-uri 'self'; connect-src https:; frame-ancestors 'self'; font-src https:; form-action 'self'; object-src 'none'; img-src 'self' https: data:; script-src 'nonce-AoPrr3b/82GWlslZWlutgagLLpHVuNBgndV6kTg9xtY=' 'unsafe-inline' 'strict-dynamic' 'report-sample' https: googletagmanager.com google-analytics.com app.pendo.io cdn.pendo.io data.pendo.io pendo-io-static.storage.googleapis.com citrix-cloud-content.customer.pendo.io citrix-cloud-data.customer.pendo.io pendo-static-6508245000126464.storage.googleapis.com; style-src 'unsafe-inline' 'report-sample'; worker-src 'none'; manifest-src 'none'; report-uri /csp/reports;
Date
Other
Sat, 17 Jan 2026 04:12:03 GMT
X-Ath-Sessionid
Other
9c958098-9400-4430-aeac-c4dd2deb4bbf
X-Ath-Transactionid
Other
5e23d0e0-dee8-4c84-aa6e-f7986c40fcc4

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching