Open
          
        
        
        
          
            
            Cached
            ·
            just now
          
        
      
    
        
          
        
        
          24
        
        
          Headers
        
      
    
  HTTP Security Headers
Status
      Strict-Transport-Security
    
    
    
      
        Excellent
      
    
    
    
      
        
          max-age=31536000; includeSubDomains; preload
        
      
    
    
    
      Content-Security-Policy
    
    
    
      
        Weak
      
    
    
    
      
        
          frame-ancestors
        
      
    
    
    
      X-Frame-Options
    
    
    
      
        Missing
      
    
    
    
      
        Not configured
      
    
    
    
      X-Content-Type-Options
    
    
    
      
        Good
      
    
    
    
      
        
          nosniff
        
      
    
    
    
      Referrer-Policy
    
    
    
      
        Missing
      
    
    
    
      
        Not configured
      
    
    
    
      Permissions-Policy
    
    
    
      
        Missing
      
    
    
    
      
        Not configured
      
    
    
    
            
            Recommendations
          
          - • Significantly strengthen CSP directives
 - • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
 - • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
 - • Consider adding Permissions-Policy to control browser features
 
Performance Headers
3 headers
      Connection
    
    
    
      Performance
    
    
    
      keep-alive
    
    
    
      Transfer-Encoding
    
    
    
      Performance
    
    
    
      chunked
    
    
    
      Vary
    
    
    
      Performance
    
    
    
      Accept-Encoding
    
    
    Caching Headers
3 headers
      Age
    
    
    
      Caching
    
    
    
      1939
    
    
    
      Cache-Control
    
    
    
      Caching
    
    
    
      no-cache, no-store, max-age=0, must-revalidate
    
    
    
      Expires
    
    
    
      Caching
    
    
    
      Wed, 05 Nov 2025 11:36:11 GMT
    
    
    Content Headers
1 headers
      Content-Type
    
    
    
      Content
    
    
    
      text/html; charset=utf-8
    
    
    Server Headers
1 headers
      Server
    
    
    
      Server
    
    
    
      cloudflare
    
    
    CORS Headers
0 headers
        No CORS headers found
      
    
  Cookies Headers
1 headers
      Set-Cookie
    
    
    
      Cookies
    
    
    
      _cfuvid=RuQ509IU5Ydw2YovLt1cx73xiXPIHNHkq8Px4Guswes-1762256171727-0.0.1.1-604800000; path=/; domain=.medium.com; HttpOnly; Secure; SameSite=None
    
    
    Other Headers
12 headers
      Alt-Svc
    
    
    
      Other
    
    
    
      h3=":443"; ma=86400
    
    
    
      Cf-Cache-Status
    
    
    
      Other
    
    
    
      HIT
    
    
    
      Cf-Ray
    
    
    
      Other
    
    
    
      9993cff0beb129b6-IAD
    
    
    
      Date
    
    
    
      Other
    
    
    
      Tue, 04 Nov 2025 11:36:11 GMT
    
    
    
      Link
    
    
    
      Other
    
    
    
      <https://glyph.medium.com>; rel="preconnect", <https://www.google.com>; rel="preconnect", <https://www.gstatic.com>; rel="preconnect", <https://glyph.medium.com/css/unbound.css>; as="style"; rel="preload"
    
    
    
      Medium-Fulfilled-By
    
    
    
      Other
    
    
    
      edgy/8.15.0, valencia/main-20251029-155529-a7b91cf847, lite/main-20251103-162106-1c0826d7d5, rito/main-20251103-162106-1c0826d7d5
    
    
    
      Medium-Missing-Time
    
    
    
      Other
    
    
    
      92
    
    
    
      Worker-Cache-Key
    
    
    
      Other
    
    
    
      medium.com/?li=false&gate-enable_medium_com_canonical_urls=true&exp-enable_new_non_moc_upsell_width=control
    
    
    
      Worker-Cache-Middleware
    
    
    
      Other
    
    
    
      true
    
    
    
      Worker-Missing-Cookies
    
    
    
      Other
    
    
    
      1
    
    
    
      X-Envoy-Upstream-Service-Time
    
    
    
      Other
    
    
    
      144
    
    
    
      X-Request-Received-At
    
    
    
      Other
    
    
    
      1762240660726
    
    
    Recommendations
Enable compression (gzip/brotli) to improve performance
Analysis completed in 125ms