18 Headers

Detected Technologies from Headers

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=63072000; includeSubDomains; preload
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
geolocation=*
Recommendations
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking

Performance Headers

Connection
Performance
close

Caching Headers

Cache-Control
Caching
no-cache, no-store, must-revalidate
Etag
Caching
W/"b399-TA8bW/QfYb77q62Vtl+WGbQxjMs"
Expires
Caching
0
Pragma
Caching
no-cache

Content Headers

Content-Length
Content
45977
Content-Type
Content
text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Akamai-Grn
Other
0.9e0c0317.1784851323.a250aaeb
Date
Other
Fri, 24 Jul 2026 00:02:04 GMT
X-Host-Id
Other
70726f642e73706f6b652e73706f6b65372d3137322e31382e302e33
X-Request-Id
Other
41e9db3d-5700-4f1d-ad8d-2641cb4b97d6, d7a0b5a4-7f13-474b-b345-50866576eb29
X-Spoke-Id
Other
jfe7
X-Transaction-Id
Other
de87c787-de42-4bf5-a2af-29559a8c9c04, de87c787-de42-4bf5-a2af-29559a8c9c04
X-Ua-Compatible
Other
IE=edge

Recommendations

Enable compression (gzip/brotli) to improve performance