HTTP Headers Analysis for https://springcm.com

Detected Technologies from Headers

See all in URL Inspect 1

ASP.NET

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-cache,no-store

Expires

Caching

-1

Pragma

Caching

no-cache

cache-control: no-cache,no-store
expires: -1
pragma: no-cache

Content Headers

Content-Length

Content

23651

Content-Type

Content

text/html; charset=utf-8

content-length: 23651
content-type: text/html; charset=utf-8

Server Headers

Server

X-Aspnet-Version

Server

X-Aspnetmvc-Version

Server

X-Powered-By

Server

server: 
x-aspnet-version: 
x-aspnetmvc-version: 
x-powered-by:

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: .AspNetCore.Antiforgery.A46WqCMQzN4=datBIeI2xIIQ_gCyp4ccNpcXCsfKYTjvWifjQxNbG5JmTIW53JQlJMENoL8bIFrlMwB5EX-JcyH3UYufqEC9HU3joQk; path=/; samesite=strict; httponly
.AspNetCore.Session=0DUbbelgozejQ6vmi87arx3idxtj37LWrJqIwORWx76rcfMQi70Aer%2FZ%2F1MdZrEzWZp6CezG3%2BjYMgEOQFnvHenpMbkidh5EbuZYQsaf5CAPOVw6; path=/; samesite=lax; httponly

Other Headers

Date

Other

Sat, 11 Apr 2026 23:40:36 GMT

P3p

Other

policyref="https://login.springcm.com/atlassupport/w3c/p3p.xml",CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"

Traceparent

Other

00-0a4834177e40db862e4923be94975621-6b978117d4a5d0f4-01

X-Ua-Compatible

Other

IE=edge

date: Sat, 11 Apr 2026 23:40:36 GMT
p3p: policyref="https://login.springcm.com/atlassupport/w3c/p3p.xml",CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
traceparent: 00-0a4834177e40db862e4923be94975621-6b978117d4a5d0f4-01
x-ua-compatible: IE=edge

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology