Open
Cached
·
just now
20
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=63072000
Content-Security-Policy
Weak
object-src; frame-ancestors; upgrade-insecure-requests
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
interest-cohort=(), browsing-topics=(), join-ad-interest-group=(), run-ad-auction=(), conversion-measurement=(), accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(self), geolocation=(), gyroscope=(), layout-animations=(self), legacy-image-formats=(), magnetometer=(), microphone=(), midi=(), oversized-images=(self), payment=(), picture-in-picture=(), publickey-credentials-create=(self), publickey-credentials-get=(), speaker-selection=(self), sync-xhr=(), unoptimized-images=(self), unsized-media=(self), usb=(), screen-wake-lock=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), hid=(), serial=(), cross-origin-isolated=(), execution-while-not-rendered=(self), execution-while-out-of-viewport=(self), keyboard-map=(), navigation-override=(self), identity-credentials-get=(), idle-detection=(), local-fonts=(), otp-credentials=(), window-management=(), storage-access=()
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Significantly strengthen CSP directives
Performance Headers
0 headers
No performance headers found
Caching Headers
2 headers
Cache-Control
Caching
no-cache, no-store, max-age=0, must-revalidate, post-check=0, pre-check=0
Last-Modified
Caching
Tue, 18 Nov 2025 23:44:47 GMT
Content Headers
2 headers
Content-Length
Content
10028
Content-Type
Content
text/html; charset=utf-8
Server Headers
1 headers
Server
Server
Nexus
CORS Headers
0 headers
No CORS headers found
Cookies Headers
0 headers
No cookies headers found
Other Headers
8 headers
Date
Other
Tue, 18 Nov 2025 23:44:47 GMT
Origin-Agent-Cluster
Other
?1
Tdm-Reservation
Other
1
Uio-Cache-Status
Other
MISS
X-Dns-Prefetch-Control
Other
off
X-Download-Options
Other
noopen
X-Permitted-Cross-Domain-Policies
Other
none
X-Robots-Tag
Other
noai, noml, SPC, noimageai
Recommendations
Enable compression (gzip/brotli) to improve performance
Analysis completed in 1212ms