DNS Gurus
Cached · just now
26 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
Basic
default-src; media-src; img-src; +2 more
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Consider adding 'preload' to HSTS for maximum security
  • • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

Performance Headers

2 headers
Connection
Performance
Transfer-Encoding
Transfer-Encoding
Performance
chunked

Caching Headers

1 headers
Cache-Control
Caching
private, no-cache, no-store, max-age=0, must-revalidate

Content Headers

1 headers
Content-Type
Content
text/html; charset=utf-8

Server Headers

2 headers
Server
Server
nginx
X-Powered-By
Server
Next.js

CORS Headers

0 headers
No CORS headers found

Cookies Headers

1 headers
Set-Cookie
Cookies
bm_sz=5397B271C100CE91FC0900853986E515~YAAQlWvcF+h3tiCcAQAAWwcqKB5/CEdXXk4mPMqQpACOc3cMN+otBCt3ZJ2v1S5FxaNzmdyDYnukQa4T/1KZZd7sy/z8EZ9yB0WoKnboxkL4FMjcX2tveA9xYHo75o096qdJQ9cjday57UuKNl/1UIvZCARIy/FSQqcBU/RnjIgT+7r++yGFTL8pe31XoqEDKhpSckAGGmGNKJclBEdQAQ0e2rukoDGTyWpPgfp1j1P43e1qRUgA4145iL0JopCvpoXnW4xGqq+8cCQVqe3bcGj8bJos0ej8MtCjdXRPrgkS8pHyMbUp7y4goSNaN2YIt67Fg4lVkHYl2GOLO7Ig4cRVGK9qZsfeLyocvYY=~3421510~3753011; Domain=.staples.com; Path=/; Expires=Wed, 04 Feb 2026 14:19:27 GMT; Max-Age=14399

Other Headers

14 headers
Akamai-Grn-Translation
Other
0.956bdc17.1770200367.17092f84
Date
Other
Wed, 04 Feb 2026 10:19:28 GMT
Server-Timing
Other
ak_p; desc="1770200367039_400321429_386477956_189403_28556_1_4_-";dur=1
X-Akamai-Transformed
Other
9 96616 0 pmb=mTOE,1mRUM,2
X-B3-Traceid
Other
115e170ed9524256
X-Ctx-Token
Other
c2ecd47aa12470c8c532ca0d51cd8daeeb87278c34bad2c5ce4793edf2df9f4d76f290ca52f74b3c054e9cec9ecc3bcf774519958d0fa75ea234532af05aa99ac0ffed
X-Device-Id
Other
0bfa981a4f450975d1a877b6079efae5
X-Dns-Prefetch-Control
Other
off
X-Download-Options
Other
noopen
X-Idfc-Sso-Txid
Other
610f26fd-20a50db4-0af09a1c-0a3ad784-bac9a10a-3d00b790
X-Idfc-Sso-Version
Other
C3.0.34 build 374
X-Rest
Other
0.005 : 1.434
X-Robots-Tag
Other
noindex, nofollow
Zipcodedebug
Other
Cookie=absent_BestGuess=present

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology