Open
Cached
·
just now
22
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=86400
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer-when-downgrade
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Consider adding Permissions-Policy to control browser features
Performance Headers
2 headers
Connection
Performance
Transfer-Encoding
Transfer-Encoding
Performance
chunked
Caching Headers
1 headers
Cache-Control
Caching
max-age=300, must-revalidate
Content Headers
1 headers
Content-Type
Content
text/html; charset=UTF-8
Server Headers
1 headers
Server
Server
nginx
CORS Headers
0 headers
No CORS headers found
Cookies Headers
1 headers
Set-Cookie
Cookies
bm_sz=7088A3022E388C57DB477D562A2C4E85~YAAQ1ADeFz61T6qaAQAANmMvtx2bP1HRsJVq1By+PrsjY8fGTxeOv/GjnGkBsNqK5J+XWxhGwqLbHNCXH9NXslOR7J/e5pcdbePCdds/gRxLyMUXoqk2mveQInuzLVRr2oRVroyBjiKSjSNzRthN3VVQnP5AW1CyA5E5J7KlsjfQZUikE0GINNwaBWMAF9tQ6QmiomeDIUETGy/UCqTt3ylyVLAMdVj1pSVv/or05HmJQagJDCr3OxKqAckZwMnq/r8Wm7yg+Zs68ELAb6vZgvbKcDkm0fZSwq3BzqqH2jdWOjM6pnY2xTC4u0VBmPiKRcc+o9DmwgI1LQMo+QMg+q3QU9n7hI2rjZhAe32levU8~4601655~3749942; Domain=.salesforce.com; Path=/; Expires=Mon, 24 Nov 2025 22:45:27 GMT; Max-Age=14400
Other Headers
10 headers
Ak-Uuid
Other
0.d400de17.1764009927.15b4b9fd
Date
Other
Mon, 24 Nov 2025 18:45:27 GMT
Host-Header
Other
a9130478a60e5f9135f765b23f26593b
Link
Other
<https://www.salesforce.com/blog/?p=73607>; rel=shortlink
Server-Timing
Other
ak_p; desc="1764009927341_400425172_364165629_4196_95097_0_0_-";dur=1
X-Akamai-Transformed
Other
9 49770 0 pmb=mRUM,2
X-Dns-Prefetch-Control
Other
off
X-Download-Options
Other
noopen
X-Permitted-Cross-Domain-Policies
Other
none
X-Rq
Other
atl3 0 20 9980
Recommendations
Enable compression (gzip/brotli) to improve performance
Analysis completed in 647ms