HTTP Headers Analysis for https://mozilla.org

Detected Technologies from Headers

See all in URL Inspect 10

AWS API Gateway

AWS

Contentful

Google Analytics

Google Tag Manager

Sentry

Stripe

Transcend

Varnish

YouTube

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Basic

upgrade-insecure-requests; base-uri; img-src; +10 more Analyze

Content-Security-Policy-Report-Only

Basic

upgrade-insecure-requests; base-uri; img-src; +10 more Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Vary

Performance

Accept-Language, Accept-Encoding

accept-ranges: bytes
connection: close
vary: Accept-Language, Accept-Encoding

Caching Headers

Age

Caching

226

Cache-Control

Caching

max-age=600

Etag

Caching

"dbd50991cb2cf37c121a579b84f6954d"

Expires

Caching

Tue, 14 Jul 2026 23:07:27 GMT

age: 226
cache-control: max-age=600
etag: "dbd50991cb2cf37c121a579b84f6954d"
expires: Tue, 14 Jul 2026 23:07:27 GMT

Content Headers

Content-Length

Content

48461

Content-Type

Content

text/html; charset=utf-8

content-length: 48461
content-type: text/html; charset=utf-8

Server Headers

Server

granian

server: granian

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Wed, 15 Jul 2026 00:52:51 GMT

Via

Other

1.1 google, 1.1 varnish, 1.1 varnish

X-Backend-Server

Other

bedrock-84f9497fd9-4sz78.gcp-us-west1

X-Cache

Other

MISS, HIT

X-Cache-Hits

Other

0, 0

X-Clacks-Overhead

Other

GNU Terry Pratchett

X-Served-By

Other

cache-nyc-kteb1890044-NYC, cache-nyc-kteb1890044-NYC, cache-nyc-kteb1890045-NYC

X-Timer

Other

S1784076772.565116,VS0,VE1

date: Wed, 15 Jul 2026 00:52:51 GMT
via: 1.1 google, 1.1 varnish, 1.1 varnish
x-backend-server: bedrock-84f9497fd9-4sz78.gcp-us-west1
x-cache: MISS, HIT
x-cache-hits: 0, 0
x-clacks-overhead: GNU Terry Pratchett
x-served-by: cache-nyc-kteb1890044-NYC, cache-nyc-kteb1890044-NYC, cache-nyc-kteb1890045-NYC
x-timer: S1784076772.565116,VS0,VE1

Recommendations

Enable compression (gzip/brotli) to improve performance