DNS Gurus
Cached · just now
24 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
Basic
default-src; media-src; img-src; +2 more
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Consider adding 'preload' to HSTS for maximum security
  • • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

Performance Headers

2 headers
Connection
Performance
Transfer-Encoding
Transfer-Encoding
Performance
chunked

Caching Headers

1 headers
Cache-Control
Caching
private, no-cache, no-store, max-age=0, must-revalidate

Content Headers

1 headers
Content-Type
Content
text/html; charset=utf-8

Server Headers

2 headers
Server
Server
nginx
X-Powered-By
Server
Next.js

CORS Headers

0 headers
No CORS headers found

Cookies Headers

1 headers
Set-Cookie
Cookies
bm_sz=DED76A591D3F2B71C84AC59AA4F959A2~YAAQjWvcF/I/4f2bAQAAnxHqCB6tQ6uj+QuNKGnDZh+9gLotQjy6Xt9PPwPWgM03MpWbEpTLzPUDjQmNoiQSLVVxiDWepnXWbIlwX4RYs/P6IVZdZohNOQ7KrImEs+wcKLId2mX1xbbe7fKc7wHj+Zwa4FFHyAb9gv6YZBhW3IkeuoKNLxGQgQ1JOlPlrfT3XEhDJCxgivPHALwV75AQxIJf3wrD6b2zaDwv+qtvO2j5r4flCoBQisHcoslwTLBh9xbZp82CLXwYK11HmHWhutlf6j12YJRRG92OT7TQuJFE/h2fshHx8MfwPjJY4VcmZO/OltyTI9xtNQadupKv3vOPpcWLllWuMl93BHw=~3356983~3553349; Domain=.staples.com; Path=/; Expires=Thu, 29 Jan 2026 12:41:23 GMT; Max-Age=14400

Other Headers

12 headers
Date
Other
Thu, 29 Jan 2026 08:41:23 GMT
Server-Timing
Other
ak_p; desc="1769676082993_400321421_348796021_50902_19975_1_4_-";dur=1
X-Akamai-Transformed
Other
9 96883 0 pmb=mTOE,1mRUM,2
X-B3-Traceid
Other
45177798ee2746c2
X-Ctx-Token
Other
96bc8728af2c789cc237ca5957cdd9aaea8474d631b481c79b4192e9f188cd1d76a9c99902a1496f561d99ee9c9b699a72144b90dc5ef009a23b5d77f25af6c8c7ffed
X-Device-Id
Other
d25370953c4a69c1e22b2914e18ae67e
X-Dns-Prefetch-Control
Other
off
X-Download-Options
Other
noopen
X-Idfc-Sso-Txid
Other
133fc948-e2e0f699-7f5aee08-0c488a85-859e163b-fe8c1bd4
X-Idfc-Sso-Version
Other
C3.0.34 build 374
X-Rest
Other
0.005 : 0.227
Zipcodedebug
Other
Cookie=absent_BestGuess=present

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology