HTTP Headers Analysis for https://myrewards.apple.com

Detected Technologies from Headers

See all in URL Inspect 6

AzureFrontDoor

Cloudflare CDNJS

Google Hosted Libraries

jsDelivr

OneTrust

Microsoft Azure

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Basic

default-src; font-src; connect-src; +4 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

accelerometer=(), camera=(), geolocation=(); +5 more

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

accept-ranges: bytes
connection: close

Caching Headers

Cache-Control

Caching

no-cache

Expires

Caching

-1

Pragma

Caching

no-cache

cache-control: no-cache
expires: -1
pragma: no-cache

Content Headers

Content-Length

Content

6268

Content-Type

Content

text/html

content-length: 6268
content-type: text/html

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: dnn_IsMobile=False; path=/; secure; HttpOnly; SameSite=Lax
.ASPXANONYMOUS=hZrbg7vf-CkCRGsfPacC36kMYC0VAEnk3qanJelKCkDwNpCf_oMTYm-9amHjXwE88l6flyoSdF7SqD8Uu3g9iE5-HkdhzyBa8J_d47kwurYLgfOB0; expires=Sun, 14-Jun-2026 21:33:46 GMT; path=/; secure; HttpOnly; SameSite=Lax
language=en-US; path=/; secure; HttpOnly; SameSite=Lax
ARRAffinity=fc4aa73f1b05670685a3bd8d46229952c3555865a6e1f7f1f47e4634583557a4;Path=/;HttpOnly;Secure;Domain=experience100.ehr.com
ARRAffinitySameSite=fc4aa73f1b05670685a3bd8d46229952c3555865a6e1f7f1f47e4634583557a4;Path=/;HttpOnly;SameSite=None;Secure;Domain=experience100.ehr.com

Other Headers

Date

Other

Mon, 06 Apr 2026 10:53:46 GMT

X-Azure-Ref

Other

20260406T105346Z-15467dc9899cl8mfhC1IAD2vyc0000000d3g00000000fvvw

X-Cache

Other

CONFIG_NOCACHE

X-Permitted-Cross-Domain-Policies

Other

none

date: Mon, 06 Apr 2026 10:53:46 GMT
x-azure-ref: 20260406T105346Z-15467dc9899cl8mfhC1IAD2vyc0000000d3g00000000fvvw
x-cache: CONFIG_NOCACHE
x-permitted-cross-domain-policies: none

Recommendations

Enable compression (gzip/brotli) to improve performance