HTTP Headers Analysis for https://navistar.com

Detected Technologies from Headers

See all in URL Inspect 25

ASP.NET

AzureFrontDoor

Bing

Buzzsprout

Cloudflare CDNJS

Facebook

Google Analytics

Google API JS Client

Google Conversion Tracking

Google DoubleClick

Google Search

Google Static File Front End

Google Tag Manager

Hotjar

jsDelivr

Microsoft Clarity

Qualtrics Active incidents

6sense Active incidents

Sovrn

The Trade Desk

Twitter

YouTube

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Basic

connect-src; frame-ancestors; object-src; +2 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Vary

Performance

Accept-Encoding

accept-ranges: bytes
connection: close
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

no-cache, no-store

Expires

Caching

-1

Pragma

Caching

no-cache

cache-control: no-cache, no-store
expires: -1
pragma: no-cache

Content Headers

Content-Length

Content

233556

Content-Type

Content

text/html; charset=utf-8

content-length: 233556
content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: shell#lang=en; path=/; secure; SameSite=None
ASP.NET_SessionId=mtsbsdvre5xvtbapeeit2qkn; path=/; secure; HttpOnly; SameSite=None
shell#lang=en; path=/; secure; SameSite=None
ASP.NET_SessionId=mtsbsdvre5xvtbapeeit2qkn; path=/; secure; HttpOnly; SameSite=None
SC_ANALYTICS_GLOBAL_COOKIE=db6ad2eaf79541ceaffd80481ea1f2f1|False; expires=Sat, 09-Aug-2036 23:26:45 GMT; path=/; secure; HttpOnly; SameSite=None
__RequestVerificationToken=q9g-VZ056jelAiwj5Lds8tvr7N-JME9zydIoHhxd1RJ7j7bhn42fD-0SheitwYAT0S_0_sYlPz01NNxsnEKF3HUDBBw9ByZo37fa-Y-_nD41; path=/; secure; HttpOnly; SameSite=None
sxa_site=International; path=/; secure; HttpOnly; SameSite=None

Other Headers

Accept-Ch

Other

Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness

Date

Other

Wed, 12 Aug 2026 23:26:45 GMT

Request-Context

Other

appId=cid-v1:80f31574-9cc8-4246-bfe7-fa54d4a2c467

X-Azure-Ref

Other

20260812T232645Z-15f997dfbb6s4sxshC1IADqrg00000000a30000000003ya8

X-Cache

Other

CONFIG_NOCACHE

accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness
date: Wed, 12 Aug 2026 23:26:45 GMT
request-context: appId=cid-v1:80f31574-9cc8-4246-bfe7-fa54d4a2c467
x-azure-ref: 20260812T232645Z-15f997dfbb6s4sxshC1IADqrg00000000a30000000003ya8
x-cache: CONFIG_NOCACHE

Recommendations

Enable compression (gzip/brotli) to improve performance