16 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

Performance Headers

Connection
Performance
close
Transfer-Encoding
Performance
chunked
Vary
Performance
Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method

Caching Headers

No caching headers found

Content Headers

Content-Type
Content
application/xml

Server Headers

Server
Server
cloudflare

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Cf-Cache-Status
Other
MISS
Cf-Ray
Other
9d1088710f5fd6e7-IAD
Date
Other
Fri, 20 Feb 2026 19:50:26 GMT
Nel
Other
{"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Report-To
Other
{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P0BScBBgaoFxc92QK6OUOI4rX%2BagppG8GBFTbWI04zr3B23CoZ84QQXZIYEb4VhUrSqg4vHSs%2Bldb04UYuVxoNdd08j%2BpDRX7j5bq%2Frrm0j7Sld4Yrbx3y2xDmO%2B6HZ5lbeA%2F1zLf1Y%3D"}],"group":"cf-nel","max_age":604800}
Via
Other
1.1 c5f8f8068a88ebb73e505f5e51b5262e.cloudfront.net (CloudFront)
X-Amz-Bucket-Region
Other
us-east-1
X-Amz-Cf-Id
Other
Wh5Jz94FscTw2geQK0Plbn1kKTL7haNANhcSeYde99DP_UjcvjTNEA==
X-Amz-Cf-Pop
Other
IAD12-P3
X-Cache
Other
Error from cloudfront

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching