HTTP Headers Analysis for https://onocan.com

Detected Technologies from Headers

See all in URL Inspect 3

Cloudflare NEL Monitoring

Cloudflare CDN

Shopify

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=7889238

Content-Security-Policy

Weak

block-all-mixed-content; frame-ancestors; upgrade-insecure-requests Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

accept-encoding

connection: close
transfer-encoding: chunked
vary: accept-encoding

Caching Headers

Etag

Caching

W/"page_cache:56894423176:IndexController:38b490979cbea17b68b6fa55416244f6:552a1c22e3acd0863138e6eb27c84399"

etag: W/"page_cache:56894423176:IndexController:38b490979cbea17b68b6fa55416244f6:552a1c22e3acd0863138e6eb27c84399"

Content Headers

Content-Language

Content

ro-RO

Content-Type

Content

text/html; charset=utf-8

content-language: ro-RO
content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _shopify_y=664a14ad-ddfb-46c0-a5cb-ed99bde302b3; domain=onocan.com; path=/; expires=Mon, 13 Sep 2027 01:44:16 GMT; SameSite=Lax
_shopify_s=ac7ca7eb-0dd8-40a0-8406-f10f12729841; domain=onocan.com; path=/; expires=Sat, 12 Sep 2026 20:14:16 GMT; SameSite=Lax
localization=RO; path=/; expires=Sun, 12 Sep 2027 19:44:17 GMT; SameSite=Lax
cart_currency=RON; path=/; expires=Sat, 26 Sep 2026 19:44:17 GMT; SameSite=Lax
_shopify_essential=:AaCXJiwsAAEA4L7yqVokUEfOocqNy8mq34hAsmx2LxssMYqZFiy-sM1c4mpACQ7vZdz10dtr0T2Dt3fSaPNM8E7RGOeiqM2wlda8LbzaSNUBWDSCzhc2Q2WcEn57A9dvtIWYFg54d948SNRqBwXdfVJkeY7enGdro4bKnxvVVOlzgbmsJJRKhfyCqZfROB1M8KuAlEq-VMj_zGix8ogiMYp8XGvwZCIDpO6KyIR5bUHUuKyW7V-089FxWcFhqw37qbGK2gnhQwdalQ2roqJD0h0ZFddbp0lNQlhE0oMTNGpBrSuSIOOpODHkthlz-7unBZssSCegnduCJkC-AzhfXzzKnGp-GxaFEDjOev5MTJy2NAtenO-HdCCrJ6Z-k7fll2xvfjMreY7OrXzp0nQrD_3Zzp7eya8xBjNnG6FmqvVxDYstb6RRt5P5994pqJZ2o2aDmoCDBxQtKZPVb9hkfD-MY9iFM8O_VnPZ6KSCR5HyWZ9HCpx9:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax
_shopify_analytics=:AaCXJi_DAAEAQ7M61aAgcwaoCc0GC0D708_wsJa1VvjkPeCRUnWiUQQeZVL1V9BIEZrZ0MYdFLUMPQgXl6gL015uAVchJpoLbCD_-XCHOFyA3twUM5DnmCGqfG-qtyxbhgdKT40tUewXq4OOboLvrIUP008:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax
_shopify_marketing=:AaCXJi_DAAEA2n-FahOJerqOi_eVg9AuivlWRYErKqqk3ikkAap-GH--fojNLzuSzqediMY6WI4lP4X0y5tbc-qP-a0Xu69b71dOXI6gWRAlKJUu1w6C1d8ru-DFkpRPDzcCaGDxgv-5_ewJaMaEBLAEfIs:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax

Other Headers

Accept-Ch

Other

Sec-CH-Viewport-Width

Alt-Svc

Other

h3=":443"; ma=86400

Cdn-Cache-Control

Other

no-cache, no-store

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

a3a167e619a5541a-IAD

Date

Other

Sat, 12 Sep 2026 19:44:17 GMT

Link

Other

URL

https://cdn.shopify.com

rel=preconnect

URL

https://cdn.shopify.com

rel=preconnect crossorigin

URL //onocan.com/cdn/shop/t/35/assets/styles.css?v=170477436032478925211784032452

as=style rel=preload

URL https://onocan.com/cdn/shopifycloud/portable-wallets/latest/accelerated-checkout-backwards-compat.css

as=style rel=preload crossorigin

Nel

Other

Report-To Group cf-nel max-age: 1w

success: 1.0%

Powered-By

Other

Shopify

Report-To

Other

Group cf-nel max-age: 1w

Endpoint 1 https://a.nel.cloudflare.com/report/v4?s=hwYsFrZ0THS6Ox9Io8WY1XwHXnuNgqu4RCgMSWQcoM2Wcs5xEkzd7S1K30nEbIUukVRBtld7oNugzdZ1228kZuy%2BEYUPY%2BinBtv8gkyz5L3FK9cuqbctcVE9ysA%3D

Server-Timing

Other

processing;dur=974;desc="gc:9", db;dur=202, db_async;dur=199.469, render;dur=249, asn;desc="60068", edge;desc="IAD", country;desc="US", theme;desc="202853515609", pageType;desc="index", servedBy;desc="b5jb", requestID;desc="f592a4a4-da9b-4bc4-a888-1629a37641e5-1789242256", _y;desc="664a14ad-ddfb-46c0-a5cb-ed99bde302b3", _s;desc="ac7ca7eb-0dd8-40a0-8406-f10f12729841", _cmp;desc="3.AMPS_USVA_f_t_ijCNg5sjRu6P8I*tqGL9qQ", compressionLevel;desc="5", compressionTime;dur=12.169

Shopify-Complexity-Score

Other

9680

Shopify-Complexity-Score-V2

Other

968

X-Dc

Other

gcp-us-east1,gcp-us-east1,gcp-us-east1

X-Download-Options

Other

noopen

X-Permitted-Cross-Domain-Policies

Other

none

X-Request-Id

Other

f592a4a4-da9b-4bc4-a888-1629a37641e5-1789242256

accept-ch: Sec-CH-Viewport-Width
alt-svc: h3=":443"; ma=86400
cdn-cache-control: no-cache, no-store
cf-cache-status: DYNAMIC
cf-ray: a3a167e619a5541a-IAD
date: Sat, 12 Sep 2026 19:44:17 GMT
link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossorigin, <//onocan.com/cdn/shop/t/35/assets/styles.css?v=170477436032478925211784032452>; as="style"; rel="preload", <https://onocan.com/cdn/shopifycloud/portable-wallets/latest/accelerated-checkout-backwards-compat.css>; as="style"; rel="preload"; crossorigin
nel: {"report_to":"cf-nel","success_fraction":0.01,"max_age":604800}
powered-by: Shopify
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=hwYsFrZ0THS6Ox9Io8WY1XwHXnuNgqu4RCgMSWQcoM2Wcs5xEkzd7S1K30nEbIUukVRBtld7oNugzdZ1228kZuy%2BEYUPY%2BinBtv8gkyz5L3FK9cuqbctcVE9ysA%3D"}]}
server-timing: processing;dur=974;desc="gc:9", db;dur=202, db_async;dur=199.469, render;dur=249, asn;desc="60068", edge;desc="IAD", country;desc="US", theme;desc="202853515609", pageType;desc="index", servedBy;desc="b5jb", requestID;desc="f592a4a4-da9b-4bc4-a888-1629a37641e5-1789242256", _y;desc="664a14ad-ddfb-46c0-a5cb-ed99bde302b3", _s;desc="ac7ca7eb-0dd8-40a0-8406-f10f12729841", _cmp;desc="3.AMPS_USVA_f_t_ijCNg5sjRu6P8I*tqGL9qQ", compressionLevel;desc="5", compressionTime;dur=12.169
shopify-complexity-score: 9680
shopify-complexity-score-v2: 968
x-dc: gcp-us-east1,gcp-us-east1,gcp-us-east1
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: f592a4a4-da9b-4bc4-a888-1629a37641e5-1789242256

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching