Open
Cached
·
just now
19
Headers
Detected Technologies from Headers
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Consider adding Permissions-Policy to control browser features
Performance Headers
Accept-Ranges
bytes
Connection
close
Transfer-Encoding
chunked
Vary
Accept-Encoding
accept-ranges: bytes connection: close transfer-encoding: chunked vary: Accept-Encoding
Caching Headers
Age
0
Cache-Control
no-store, no-cache, must-revalidate
Expires
Thu, 19 Nov 1981 08:52:00 GMT
Pragma
no-cache
age: 0 cache-control: no-store, no-cache, must-revalidate expires: Thu, 19 Nov 1981 08:52:00 GMT pragma: no-cache
Content Headers
Content-Type
text/html; charset=UTF-8
content-type: text/html; charset=UTF-8
Server Headers
Server
Apache
X-Powered-By
PHP/8.5.9
server: Apache x-powered-by: PHP/8.5.9
CORS Headers
No CORS headers found
Cookies Headers
Set-Cookie
PHPSESSID
2222ddf5a49c692563add727584e3db6
2222ddf5a49c692563add727584e3db6
path=/
SameSite=Strict
secure
HttpOnly
Max-Age=2h
expires=2h
Other Headers
Date
Sun, 23 Aug 2026 17:00:46 GMT
Via
1.1 webcache1 (Varnish/trunk)
X-Varnish
26239502646
date: Sun, 23 Aug 2026 17:00:46 GMT via: 1.1 webcache1 (Varnish/trunk) x-varnish: 26239502646
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology