HTTP Headers Analysis for https://stage.perf.news.mastercard.com

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Present

SAMEORIGIN, SAMEORIGIN

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

accept-ranges: bytes
connection: close

Caching Headers

Cache-Control

Caching

max-age=604800

Etag

Caching

"0-64ff84adc6645"

Expires

Caching

Sat, 17 Oct 2026 20:18:19 GMT

Last-Modified

Caching

Tue, 21 Apr 2026 13:21:26 GMT

cache-control: max-age=604800
etag: "0-64ff84adc6645"
expires: Sat, 17 Oct 2026 20:18:19 GMT
last-modified: Tue, 21 Apr 2026 13:21:26 GMT

Content Headers

Content-Length

Content

0

Content-Type

Content

text/html

content-length: 0
content-type: text/html

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: JSESSIONID='';expires='Fri, 5 Oct 2018 14:28:00 GMT'; Max-Age=0; Path=/;Secure
cabaseurl='';expires='Fri, 5 Oct 2018 14:28:00 GMT'; Max-Age=0; Path=/;Secure
caredirectid='';expires='Fri, 5 Oct 2018 14:28:00 GMT'; Max-Age=0; Path=/;Secure
calogout-redirect='';expires='Fri, 5 Oct 2018 14:28:00 GMT'; Max-Age=0; Path=/;Secure
calocale='';expires='Fri, 5 Oct 2018 14:28:00 GMT'; Max-Age=0; Path=/;Secure
caredirecturl='';expires='Fri, 5 Oct 2018 14:28:00 GMT'; Max-Age=0; Path=/;Secure
casiteid='';expires='Fri, 5 Oct 2018 14:28:00 GMT'; Max-Age=0; Path=/;Secure
BIGipServerstage.perf.dm.mc.us-https-pool=!GeM548V3lrHk0HX2hUaYoFA43WQiGMtVTukoKxiqixFzo88NYSpu4w==;expires='Fri, 5 Oct 2018 14:28:00 GMT'; Max-Age=0; Path=/;Secure
BIGipServerstage.perf.dm.mc.us-https-pool=787913994.559.0000; path=/; Httponly; Secure
TS01189554=0160035456bfd7b899f4cd96e507f8d62eac94160172ea5f7e03fe65810810d7e93954980af526718879fe782eb5a57aeee575beb612689f27ec9a20fd56a971581244c32b935490c0a6571adb876d48c57a7b0c9f6c47e7f926e1f921e9a562a65fe4ea1acd6a665e2faa8567d0486301f22d3f67240dd9e49247d80aeef0d358586c8872077ff664faa4fac15fc42032c09077910ebb0231cd82f76447eb12231c1ce13f1636c0b4a3dfba5dbd57a6a91b95970913fc3cb1e02d4fbe15d531aecb6f8564; Path=/; Secure; HttpOnly

Other Headers

Date

Other

Sat, 10 Oct 2026 20:18:19 GMT

date: Sat, 10 Oct 2026 20:18:19 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance