HTTP Headers Analysis for https://mend.md

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=15552000; includeSubDomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Present

accelerometer=(self), autoplay=(self), camera=(self); +18 more

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

connection: close
transfer-encoding: chunked

Caching Headers

No caching headers found

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: .AspNetCore.Mvc.CookieTempDataProvider=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; secure; samesite=lax; httponly
ARRAffinity=36e2dcfdb4cfc5961321b41aa6699546e3450e4ab469338868df08f71e42e9fc;Path=/;HttpOnly;Secure;Domain=mend.md
ARRAffinitySameSite=36e2dcfdb4cfc5961321b41aa6699546e3450e4ab469338868df08f71e42e9fc;Path=/;HttpOnly;SameSite=None;Secure;Domain=mend.md

Other Headers

Date

Other

Sun, 03 May 2026 11:43:53 GMT

P3p

Other

policyref="/w3c/p3p.xml", CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"

Request-Context

Other

appId=cid-v1:61d37610-77fa-4e4e-befb-b9943e46f827

X-Ua-Compatible

Other

IE=Edge,chrome=1

date: Sun, 03 May 2026 11:43:53 GMT
p3p: policyref="/w3c/p3p.xml", CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
request-context: appId=cid-v1:61d37610-77fa-4e4e-befb-b9943e46f827
x-ua-compatible: IE=Edge,chrome=1

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching