Open
Cached
·
just now
27
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
Performance Headers
1 headers
Transfer-Encoding
Performance
chunked
Caching Headers
3 headers
Cache-Control
Caching
no-cache, no-store, must-revalidate
Expires
Caching
0
Pragma
Caching
no-cache
Content Headers
1 headers
Content-Type
Content
text/html; charset=utf-8
Server Headers
1 headers
Server
Server
envoy
CORS Headers
0 headers
No CORS headers found
Cookies Headers
1 headers
Set-Cookie
Cookies
gsid=b60e4a1b-d2be-49bc-92cc-eb9cdac3af7d; Max-Age=86400; Expires=Sun, 09 Nov 2025 00:29:16 GMT; Path=/; Domain=.netflix.com; Secure; HTTPOnly; SameSite=None
Other Headers
16 headers
Accept-Ch
Other
Sec-CH-UA-Platform-Version,Sec-CH-UA-Model
Content-Security-Policy-Report-Only
Other
default-src https: wss: 'unsafe-inline' 'unsafe-eval'; font-src https: data: ; img-src https: data: blob: ; media-src https: blob: ; worker-src https: blob: ; report-uri https://www.netflix.com/log/www/csp/1;
Date
Other
Sat, 08 Nov 2025 00:29:16 GMT
Via
Other
1.1 i-095bb335c8622e908 (us-east-1)
X-B3-Traceid
Other
690e8edc5d5ea02f7a2d533f1eb31e73
X-Envoy-Decorator-Operation
Other
lo_svc
X-Envoy-Upstream-Service-Time
Other
384
X-Netflix-Cookieandmsl.profileguid.match
Other
NA
X-Netflix-Headerandcookie.profileguid.match
Other
NA
X-Netflix-Headerandmsl.profileguid.match
Other
NA
X-Netflix.nfstatus
Other
1_1
X-Netflix.proxy.execution-Time
Other
404
X-Netflix.request.growth.session.id
Other
b60e4a1b-d2be-49bc-92cc-eb9cdac3af7d
X-Originating-Url
Other
http://www.netflix.com/
X-Request-Id
Other
62f34d61-c692-4f4e-ba53-26cfab2fbe5b
X-Robots-Tag
Other
index
Recommendations
Enable compression (gzip/brotli) to improve performance
Analysis completed in 976ms