12 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Excellent
deny
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Consider adding 'preload' to HSTS for maximum security
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

Performance Headers

1 headers
Transfer-Encoding
Performance
chunked

Caching Headers

1 headers
Cache-Control
Caching
private

Content Headers

1 headers
Content-Type
Content
text/html; charset=utf-8

Server Headers

0 headers
No server headers found

CORS Headers

1 headers
Access-Control-Expose-Headers
Cors
Request-Context

Cookies Headers

1 headers
Set-Cookie
Cookies
ARRAffinitySameSite=4506fed21ae7329212e22736c2f80898a13d9fb6173622080112cc34ac5998d2;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.nuget.org

Other Headers

3 headers
Content-Security-Policy-Report-Only
Other
default-src 'self' 'nonce-Fwizd1iTPOeN3kL9Un//gVlj2MZv8p34U3/82pRtQVs=' 'strict-dynamic' https:; script-src 'nonce-Fwizd1iTPOeN3kL9Un//gVlj2MZv8p34U3/82pRtQVs=' 'sha512-gU7kztaQEl7SHJyraPfZLQCNnrKdaQi5ndOyt4L4UPL/FHDd/uB9Je6KDARIqwnNNE27hnqoWLBq+Kpe4iHfeQ==' 'sha512-DXYctkkhmMYJ4vYp4Dm6jprD4ZareZ7ud/d9mGCKif/Dt3FnN95SjogHvwKvxXHoMAAkZX6EO6ePwpDIR1Y8jw==' 'sha512-mz4SrGyk+dtPY9MNYOMkD81gp8ajViZ4S0VDuM/Zqg40cg9xgIBYSiL5fN79Htbz4f2+uR9lrDO6mgcjM+NAXA==' 'sha512-pnt8OPBTOklRd4/iSW7msOiCVO4uvffF17Egr3c7AaN0h3qFnSu7L6UmdZJUCednMhhruTLRq7X9WbyAWNBegw==' 'strict-dynamic' https:; font-src 'self' https://res-1.cdn.office.net/files/fabric-cdn-prod_20221201.001/assets/fonts/ https://res-1.cdn.office.net/files/fabric-cdn-prod_20221201.001/assets/icons/ 'nonce-Fwizd1iTPOeN3kL9Un//gVlj2MZv8p34U3/82pRtQVs='; base-uri 'none'; form-action 'self' 'nonce-Fwizd1iTPOeN3kL9Un//gVlj2MZv8p34U3/82pRtQVs='; style-src 'self' 'nonce-Fwizd1iTPOeN3kL9Un//gVlj2MZv8p34U3/82pRtQVs='; report-uri ; object-src 'none'; frame-ancestors 'none';
Date
Other
Thu, 06 Nov 2025 01:21:32 GMT
Request-Context
Other
appId=cid-v1:338f6804-b1a9-4fe3-bba7-c93064e7ae7b

Recommendations

Enable compression (gzip/brotli) to improve performance

Analysis completed in 165ms