HTTP Headers Analysis for https://login.springcm.com

Detected Technologies from Headers

See all in URL Inspect 1

ASP.NET

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-cache,no-store

Expires

Caching

-1

Pragma

Caching

no-cache

cache-control: no-cache,no-store
expires: -1
pragma: no-cache

Content Headers

Content-Length

Content

23656

Content-Type

Content

text/html; charset=utf-8

content-length: 23656
content-type: text/html; charset=utf-8

Server Headers

Server

X-Aspnet-Version

Server

X-Aspnetmvc-Version

Server

X-Powered-By

Server

server: 
x-aspnet-version: 
x-aspnetmvc-version: 
x-powered-by:

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: .AspNetCore.Antiforgery.A46WqCMQzN4=4eTyBW2TLNJU0BuBxmR6c0Jr3lZnhyd10uk0opJ1g5tqMmEyM6XsbF04m8jt3c-Ijfl9F0LgK2GKbIQp7W0HlEiz5Yo; path=/; samesite=strict; httponly
.AspNetCore.Session=Ll%2B%2Fc355wbUAEfhTXMlv7GYVQdoNrA8CFXZeMRZDWyBu4vR4zyER%2BJlK3pG%2F1%2Fp0418nO7pcnccR5OMVm20lHEntUlMazOKFKB%2Bmm0PGTUL9ZANO; path=/; samesite=lax; httponly

Other Headers

Date

Other

Mon, 13 Apr 2026 22:12:23 GMT

P3p

Other

policyref="https://login.springcm.com/atlassupport/w3c/p3p.xml",CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"

Traceparent

Other

00-c71ccefa983632549f9125d0f7d82b87-087a0e459b7910c1-01

X-Ua-Compatible

Other

IE=edge

date: Mon, 13 Apr 2026 22:12:23 GMT
p3p: policyref="https://login.springcm.com/atlassupport/w3c/p3p.xml",CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
traceparent: 00-c71ccefa983632549f9125d0f7d82b87-087a0e459b7910c1-01
x-ua-compatible: IE=edge

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology