11 Headers

Detected Technologies from Headers

HTTP Security Headers

Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
Weak
object-src; base-uri; report-uri; +1 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
  • Consider adding 'preload' to HSTS for maximum security
  • Significantly strengthen CSP directives
  • Consider adding Permissions-Policy to control browser features

Performance Headers

Connection
Performance
close
Transfer-Encoding
Performance
chunked

Caching Headers

No caching headers found

Content Headers

No content headers found

Server Headers

Server
Server
cloudflare

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Cf-Cache-Status
Other
DYNAMIC
Cf-Ray
Other
9f842da81cc601e1-IAD
Date
Other
Thu, 07 May 2026 23:59:25 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching