DNS Gurus
Cached · just now
13 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

Performance Headers

2 headers
Connection
Performance
Transfer-Encoding
Transfer-Encoding
Performance
chunked

Caching Headers

2 headers
Cache-Control
Caching
s-maxage=31536000, stale-while-revalidate
Etag
Caching
"s7883vuhadoebk"

Content Headers

1 headers
Content-Type
Content
text/html; charset=utf-8

Server Headers

1 headers
X-Powered-By
Server
Next.js

CORS Headers

0 headers
No CORS headers found

Cookies Headers

1 headers
Set-Cookie
Cookies
bm_sz=1F333FEE886EF530982B6CD65B18D643~YAAQkWvcF2TeksebAQAAEjkB/R5gQK2v4z6VpINSOobV/GJsovXXQ/vapL+3WK2Rr3AGwG0omn/arcOC56aEvqKd1U6lO5Hy26bjlrdkyboNQLvYP1ObFWaAMKhgpJVPGyYUsTXin6tFCS5J0/gIVJCKjHJ6OO+5PP4B2io4gzf4/+grIjQ8DuQ77lh8NqR8na4NVdWhMefdgZ9quouDESM/6LJ75KHjEcolB8EepCiIWPFNnQ46KGLonu7PCrbox/qERqlowVO2DEmXEtixaRmLyqtUoiWToctvlkEdMTVRNEkIb5OBltuId49Xh+bJlfcCtIn2R6uRs2Lk0aJhlQstHTN+g2QvlfVQ7S4=~3163702~3289907; Domain=.staples.com; Path=/; Expires=Tue, 27 Jan 2026 05:11:14 GMT; Max-Age=14400

Other Headers

6 headers
Date
Other
Tue, 27 Jan 2026 01:11:14 GMT
Request-Context
Other
appId=cid-v1:
Server-Timing
Other
ak_p; desc="1769476274248_400321425_1946909005_13952_22215_1_4_-";dur=1
X-Akamai-Transformed
Other
9 133870 0 pmb=mTOE,1mRUM,2
X-Nextjs-Cache
Other
HIT
Zipcodedebug
Other
Cookie=absent_BestGuess=present

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology