HTTP Headers Analysis for https://scout.com

Detected Technologies from Headers

See all in URL Inspect 8

Apache Traffic Server

Bing

Envoy

Google Tag Manager

Next.js

ScorecardResearch (ComScore)

Yahoo

YouTube

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

frame-ancestors; base-uri; default-src; +10 more Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Present

geolocation=(), camera=(), payment=(); +1 more

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch

connection: close
transfer-encoding: chunked
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch

Caching Headers

Age

Caching

0

Cache-Control

Caching

private, no-store, must-revalidate

age: 0
cache-control: private, no-store, must-revalidate

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

ATS

X-Powered-By

Server

Next.js

server: ATS
x-powered-by: Next.js

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Wed, 25 Feb 2026 18:30:28 GMT

Link

Other

URL https://s.yimg.com

rel=preconnect crossorigin

URL https://media.zenfs.com

rel=preconnect crossorigin

URL

https://tse1.mm.bing.net

rel=preconnect crossorigin

URL

https://tse2.mm.bing.net

rel=preconnect crossorigin

X-Envoy-Decorator-Operation

Other

sidekick--mtls-production-use1.search-aws-sidekick-prod:4080/*

X-Envoy-Upstream-Service-Time

Other

10

date: Wed, 25 Feb 2026 18:30:28 GMT
link: <https://s.yimg.com>; rel=preconnect; crossorigin, <https://media.zenfs.com>; rel=preconnect; crossorigin, <https://tse1.mm.bing.net>; rel=preconnect; crossorigin, <https://tse2.mm.bing.net>; rel=preconnect; crossorigin
x-envoy-decorator-operation: sidekick--mtls-production-use1.search-aws-sidekick-prod:4080/*
x-envoy-upstream-service-time: 10

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology