HTTP Headers Analysis for https://ottogeleng.com

Detected Technologies from Headers

See all in URL Inspect 2

Akamai Active incidents

Nginx

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=15780000;

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

s-maxage=300, stale-while-revalidate

Etag

Caching

W/"GWZkI2Capk"

Last-Modified

Caching

Sun, 16 Aug 2026 16:29:28 GMT

cache-control: s-maxage=300, stale-while-revalidate
etag: W/"GWZkI2Capk"
last-modified: Sun, 16 Aug 2026 16:29:28 GMT

Content Headers

Content-Type

Content

text/html;charset=utf-8

content-type: text/html;charset=utf-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _abck=CC66CED1220A5C30758D03682E3B1376~-1~YAAQmQwDF5TDjN2fAQAAMrBxCxDPOgvFxCB+QWAue0FSrrrfFinQbvzzx5TUlbYAOjRSVAUpchRuNbtJ0PMuerO4YP979go8TRWMJJFoB0PfeAmsV7MNqqTASUoJ6nnRu7tL00DVkWh1qqNovDK0ijqOjyLjpL7yYampz4avfKNmlJQqd4UO+1K8TBHLN9Q8Hgxs68K97bhajDYQkR0oWZwvxrGQSqfmkZimJsSA8/aSdaPPphDvyl8LlgStlty0pgr3vVqBJmRs9h7G13xbZXzQRnArG1SWOmM5GbqCQk2bglAPu9t+Gr8J17Uvy4gr6uNEOk+wJImQAJ5zF9CbKINHMPn24L8cpSDmW4EQbN4nMrEGjE3CvqrPhUFsTrFkW4u8vwA0/gmSOxcRTREWOJ6Ldn1LF4vp2Q4sZRGwUZR9cfd7flfP98O3Hoq12Dzxb0EMYRF0dXGnKntZbwI=~-1~-1~-1~-1~-1; Domain=.belmond.com; Path=/; Expires=Mon, 16 Aug 2027 16:39:55 GMT; Max-Age=31536000; SameSite=None; Secure
bm_sz=BE764BD7FBBABC11821DEB02EA069669~YAAQmQwDF5XDjN2fAQAAMrBxCwCXZkrzX5xC5dPszHMDK86xs1SzQXZQz2W4NSF2qYJ3p9QPwdWI0SDEhxGk5KSjnf+/YToDfx3Z23xq8eT69Zf6VS34PoZJqcy5plhCSdqgvEBUqa8Qgc7qXTPrZmBWxbYoNNKrc7S8+HMrugXTu6amKifkf9AYBAqAGnu8h/B3+Z7KqmiAb3rlGXBOIAOpdHj/rJ7+WMNFCspCoBvgc3zUrLV493j7ChLRnH9t+QL9Y8bFxneNZCBht6SLVmfxMTKM+IF8UEe9Ytu6oMMzkv8mGl1Y5MCb+eVWh0arQNwcZJ+c1X5wge1npWJDuPs4AWJiDsQd3YX1/18Q5Eq4SlcYaP+J~3748912~3163445; Domain=.belmond.com; Path=/; Expires=Sun, 16 Aug 2026 20:39:55 GMT; Max-Age=14400; SameSite=None; Secure

Other Headers

Date

Other

Sun, 16 Aug 2026 16:39:55 GMT

Server-Timing

Other

cdn-cache; desc=HIT, edge; dur=132, ak_p; desc="1786898394955_386075801_1694333414_13097_8541_64_83_-";dur=1

X-Akamai-Transformed

Other

9 39603 0 pmb=mRUM,2

date: Sun, 16 Aug 2026 16:39:55 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=132, ak_p; desc="1786898394955_386075801_1694333414_13097_8541_64_83_-";dur=1
x-akamai-transformed: 9 39603 0 pmb=mRUM,2

Recommendations

Enable compression (gzip/brotli) to improve performance