HTTP Headers Analysis for https://social-plugins.line.me

Detected Technologies from Headers

See all in URL Inspect 1

Nginx

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=15768000

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Vary

Performance

Origin

accept-ranges: bytes
connection: close
vary: Origin

Caching Headers

Cache-Control

Caching

public,max-age=300

Etag

Caching

"5e499dc682120f8c6b3e28ce71bb4bbe"

Last-Modified

Caching

Thu, 02 Apr 2026 07:37:13 GMT

cache-control: public,max-age=300
etag: "5e499dc682120f8c6b3e28ce71bb4bbe"
last-modified: Thu, 02 Apr 2026 07:37:13 GMT

Content Headers

Content-Length

Content

43148

Content-Type

Content

text/html

content-length: 43148
content-type: text/html

Server Headers

Server

nginx

server: nginx

CORS Headers

Access-Control-Allow-Methods

Cors

GET

Access-Control-Allow-Origin

Cors

http://developers.line.biz

Access-Control-Expose-Headers

Cors

Content-Length,Content-Type,Connection,Date,ETag,Server,x-amz-request-id

Access-Control-Max-Age

Cors

86400

access-control-allow-methods: GET
access-control-allow-origin: http://developers.line.biz
access-control-expose-headers: Content-Length,Content-Type,Connection,Date,ETag,Server,x-amz-request-id
access-control-max-age: 86400

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Fri, 03 Apr 2026 18:01:16 GMT

X-Amz-Request-Id

Other

tx000005c4bf97b8ea1b577-0069d0006c-20942dad-jp2

X-Download-Bandwidth-Usage

Other

388438/681818181.81818

X-Rgw-Object-Type

Other

Normal

X-Rps-Usage

Other

10/5454.5454545455

X-Upload-Bandwidth-Usage

Other

0/681818181.81818

date: Fri, 03 Apr 2026 18:01:16 GMT
x-amz-request-id: tx000005c4bf97b8ea1b577-0069d0006c-20942dad-jp2
x-download-bandwidth-usage: 388438/681818181.81818
x-rgw-object-type: Normal
x-rps-usage: 10/5454.5454545455
x-upload-bandwidth-usage: 0/681818181.81818

Recommendations

Enable compression (gzip/brotli) to improve performance