26 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=15552000; preload
Content-Security-Policy
Basic
default-src; script-src; style-src; +11 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
accelerometer=(), attribution-reporting=(self), autoplay=(); +45 more
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

Performance Headers

Connection
Performance
close
Transfer-Encoding
Performance
chunked
Vary
Performance
Accept-Encoding

Caching Headers

Cache-Control
Caching
private, no-cache, no-store, must-revalidate
Expires
Caching
Sat, 01 Jan 2000 00:00:00 GMT
Pragma
Caching
no-cache

Content Headers

Content-Type
Content
text/html; charset="utf-8"

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie
Cookies

Other Headers

Accept-Ch
Other
viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model
Accept-Ch-Lifetime
Other
4838400
Alt-Svc
Other
h3=":443"; ma=86400
Date
Other
Tue, 19 May 2026 23:12:12 GMT
Document-Policy
Other
force-load-at-top, include-js-call-stacks-in-crash-reports
Origin-Agent-Cluster
Other
?1
Reporting-Endpoints
Other
coop_report="https://web.facebook.com/browser_reporting/coop/?minimize=0", default="https://web.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7641744679695974028&cpp=C3&cv=1039829830&st=1779232332157", permissions_policy="https://web.facebook.com/ajax/browser_error_reports/"
X-Fb-Connection-Quality
Other
GOOD; q=0.7, rtt=99, rtx=0, c=10, mss=1368, tbw=3272, tp=-1, tpl=-1, uplat=133, ullat=0
X-Fb-Debug
Other
WHWz06aA+ETvnyea/+6XthebxqHNtYB5Yuc/KbyRX5DlyD3DY/gsVP8CJiyTRFIr7170+uVQqwJSpqWYOX4MdQ==

Recommendations

Enable compression (gzip/brotli) to improve performance