Open
Cached
·
just now
18
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=15768000 ; includeSubDomains ; preload
Content-Security-Policy
Basic
default-src; img-src; script-src-elem; +3 more
default-src https://gasstg.mcd.com 'unsafe-inline' 'unsafe-eval';img-src gasstg.mcd.com data:; script-src-elem https://gasstg.mcd.com https://mcdonalds-crew-dev.eu-dev.janraincapture.com/ https://mcdonalds-dev.rpxnow.com https://rpxnow.com/ https://d29usylhdk1xyu.cloudfront.net https://d1lqe9temigv1p.cloudfront.net https://az416426.vo.msecnd.net 'unsafe-inline' 'unsafe-eval';style-src-elem https://gasstg.mcd.com https://quilt-cdn.janrain.com 'unsafe-inline' 'unsafe-eval'; font-src gasstg.mcd.com data:; connect-src https://dc.services.visualstudio.com https://gasstg.mcd.com https://sandboxmcdex.qualtrics.com
X-Frame-Options
Present
allow-from https://d2el89j6e5xujj.cloudfront.net/ https://d2fgp3lhwvsaoc.cloudfront.net/ https://d38c9f8ufgdco2.cloudfront.net/ https://sandboxmcdex.qualtrics.com
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Consider adding Permissions-Policy to control browser features
Performance Headers
2 headers
Connection
Performance
Transfer-Encoding
Transfer-Encoding
Performance
chunked
Caching Headers
3 headers
Cache-Control
Caching
no-cache,no-store
Expires
Caching
-1
Pragma
Caching
no-cache
Content Headers
1 headers
Content-Type
Content
text/html; charset=utf-8
Server Headers
0 headers
No server headers found
CORS Headers
0 headers
No CORS headers found
Cookies Headers
0 headers
No cookies headers found
Other Headers
7 headers
Akamai-Grn
Other
0.9ece4917.1764547734.c6d6337
Date
Other
Mon, 01 Dec 2025 00:08:54 GMT
Include-Referred-Token-Binding-Id
Other
true
Server-Timing
Other
ak_p; desc="1764547734329_390712990_208495415_26267_1889_0_11_-";dur=1
X-Akam-Sw-Version
Other
0.5.0
X-Akamai-Transformed
Other
9 55195 0 pmb=mRUM,2
X-Download-Options
Other
noopen
Recommendations
Enable compression (gzip/brotli) to improve performance
Analysis completed in 567ms