DNS Gurus
Cached · just now
22 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=2592000
Content-Security-Policy
Good
default-src; frame-src; connect-src; +8 more
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • • Strengthen CSP by removing 'unsafe-eval'
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

Performance Headers

3 headers
Connection
Performance
close
Transfer-Encoding
Performance
chunked
Vary
Performance
Accept-Encoding

Caching Headers

3 headers
Cache-Control
Caching
no-store, no-cache, must-revalidate, max-age=0
Expires
Caching
Tue, 03 Jul 2001 06:00:00 GMT
Pragma
Caching
no-cache

Content Headers

1 headers
Content-Type
Content
text/html;charset=utf-8

Server Headers

1 headers
Server
Server
cloudflare

CORS Headers

0 headers
No CORS headers found

Cookies Headers

1 headers
Set-Cookie
Cookies
_cfuvid=sBHOjIZFRlRBFbTeuqUT0QnS5vQ_4fIq9juIxvhNXpI-1768534692282-0.0.1.1-604800000; path=/; domain=.patreon.com; HttpOnly; Secure; SameSite=None

Other Headers

8 headers
Cf-Cache-Status
Other
DYNAMIC
Cf-Ray
Other
9bea94220bc320d1-IAD
Date
Other
Fri, 16 Jan 2026 03:38:12 GMT
Nel
Other
{"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Report-To
Other
{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r5%2FhxSHLsd5baJyVarHLexxoD%2FHwtv0HCXftzI6Isalnr%2FxRwqHDKKogXsB8Ya8sssA5giXXERDRJI6ZDb61KfPeRJtCbGUzGQqfV62uWWFPq8E12rjRvhnl0gPQe3IILZlbdg%3D%3D"}],"group":"cf-nel","max_age":604800}
Service-Worker-Allowed
Other
/
X-Permitted-Cross-Domain-Policies
Other
master-only
X-Webkit-Csp
Other
default-src 'none'; frame-src https://static-corp.sendsafely.com https://content.googleapis.com https://docs.google.com/ 'self' blob: https://bid.g.doubleclick.net https://www.google.com sendsafely: https://analytics-frame.sendsafely.com https://www.recaptcha.net https://static-secure.patreon.com https://app.sendsafely.com https://js.stripe.com;connect-src 'self' ; script-src 'self' https://static-secure.patreon.com https://www.google.com https://www.gstatic.com https://accounts.google.com https://apis.google.com https://content.googleapis.com https://ssl.gstatic.com https://www.recaptcha.net https://ssl.google-analytics.com https://api.stripe.com https://js.stripe.com https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://js.hs-analytics.net https://js.hsforms.net https://forms.hubspot.com https://api.hubapi.com https://internal.hubapi.com ; style-src 'self' 'unsafe-inline'; font-src 'self'; manifest-src 'self'; object-src 'self' https://static-secure.patreon.com; child-src 'self'; media-src 'self' blob:; img-src 'self' https://cdn.zapier.com https://zapier.com https://app-static.sendsafely.com blob: data: https://www.google.com https://www.gstatic.com https://accounts.google.com https://apis.google.com https://content.googleapis.com https://ssl.gstatic.com https://ssl.google-analytics.com https://www.gravatar.com i0.wp.com i1.wp.com i2.wp.com i3.wp.com https://stats.g.doubleclick.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://track.hubspot.com chrome-extension:;

Recommendations

Enable compression (gzip/brotli) to improve performance