23 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=15552000; preload
Content-Security-Policy
Basic
default-src; script-src; style-src; +11 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges
Performance
bytes
Connection
Performance
close
Vary
Performance
Accept-Encoding

Caching Headers

Cache-Control
Caching
private, no-cache, no-store, must-revalidate
Expires
Caching
Sat, 01 Jan 2000 00:00:00 GMT
Pragma
Caching
no-cache

Content Headers

Content-Length
Content
9
Content-Type
Content
text/html; charset="utf-8"

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Alt-Svc
Other
h3=":443"; ma=86400
Date
Other
Fri, 10 Apr 2026 12:10:56 GMT
Document-Policy
Other
include-js-call-stacks-in-crash-reports
Proxy-Status
Other
http_request_error; e_fb_vipaddr="AcMV649kPFBZiq9LSbZzHfZttYPmC0qPsNgziGlQOHw1xy7XLX9_EXKh-qwfPjLlSbQ-KPTaYgfmMkkgLGUZ5mf6u2Dtiw1XHm-F"; e_clientaddr="AcMvBm9n_sP8_keXwhVjVTlbuxuQDUOFNRiH2mpmmz_AaSHROS9NZ9X7n6ze4VjkLKtGuPzPlzQvM127-PF9okrdx4wlWHmhwVPoiCv2D6m9kXiuaw"; e_upip="AcNzZtwrZWpky-sf9TfSJJZ_eAaJ8LG2lDWvx_OKOHaNrXWbwXtEwL58294EPIm_4Js7t7jy7ztQKnS7YzwEdyzseAjM2nVgwpLoskHoXMw"; e_fb_zone="AcPvsAlYEQKCAHF1yx8XlB17c-de3Jkblozab2N9GLre89axSRucjthvRPhGGoEv"; e_fb_twtaskhandle="AcMGc9DH7NoqTuZyyWKYJVs5hAUk22mdpK5Uq0GBTNm81Okja6cE3Cz7FqdfUWAurXDTxnJZye1AED1vv9LUfD6Vxl-HzXbpY-dDHl8z40XxUQ"; e_proxy="AcO5dWqUYas7xjRbHjY-eKFa_tnuQkRAVw_efyVn1H1rxs_miV-kx3MqpXGGaO5mx0ei4l-H5h5xkOHVbts", http_request_error; e_fb_vipaddr="AcPjIt_8eN2B6nw0yXIbvQeBlRKPgz1FDC3j_2Ju7VOZOZgcbB5VNaWihOt_1zSLn-L3JyTbcJkSKOsZp55mdSsDBtbGgJbx5PlMpQwW"; e_clientaddr="AcNd7ftkapmBwxnATYou6v91Lcmwg-m1AiXcwvYSVdrHJSCVOBxT8Urzr2BXdzLDYIwu7T-_3e8UzThNB9pfPJDVtFER_e4w-n-5ByoUgoHwc1xxOg"; e_upip="AcOOTIR2v8bxKavzLIcHeMjo0VXw9GoSNklpfZYLlUPts1AhNZQzPvD7dfjylq4icrwFWoxjVRE_jqxfWr-f1GRF5522iwNlklt_"; e_fb_zone="AcPbs8V1co-mdoT41pu3hHSWz1QFSBGlkC8ufpZ0UdrqvweMa4Pq12kmgqQtZ8P9"; e_fb_twtaskhandle="AcP27iUFrbaQMVFMcsS7Jt_NQdfCwpV3nvXjU2M-BeBpDRtggjLL5lkM8jYFjDqD1OYEq6lx5L_ZjE6XWPwjucOEnR3sGTUPUw"; e_proxy="AcNqVlFWYjtz4bHglTcs_RcsdFYlYatSrTdCN4jWBHMMUGVmBDLAM34xwyrpqwf1NUtSRQQPL2-UnGcXGHzG", http_request_error; e_fb_vipaddr="AcMl2exPmKWjGRgce1NI4LU1dM7Fnb9lXY0W1-8rReK6ZmHJE8oqV4PxCI11PczJpDhhtTx2"; e_clientaddr="AcOAQ87tbJEgo1poFyqB4ty9kTf5p2EFfZuOkU9Y8rmHai52MK0UdQVDanyWHW-ncq6WrQFuiABmvWRw"; e_upip="AcObkh3FhJ61r_NULcUT5q3y2CpjfJY2kvF57Gt2TCAgbmNTzqnH_18c0JD-DIqg9erT96gmhiF5ZTKpBupwryoHbNdhFLY-bY4XGriz"; e_fb_zone="AcPg9fy86j5TNokZqVD-9Yu7of1diKZz2Z0GIxq_6hTR10hj5Bd3j2oxbJ-VNw"; e_fb_twtaskhandle="AcPnOlI5W2U9msiVqIBY19Rz1EDfWILMCc1bHB9SarFzQxJtn6ca5sYRNSFL6npvN_4NAxSWxur6yyU-ZxAj6j1crJs-8lxRpao"; e_proxy="AcM0L_U3qlyssAKIa_j5PJonEnhk0p-AwKqYeXkLw03tG9Mr8Fw_vjUR0tEptcakqsm9MjiiQGAyUy8"
Reporting-Endpoints
Other
coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7627101949908744120&cpp=C3&cv=1037069925&st=1775823056206"
X-Fb-Connection-Quality
Other
GOOD; q=0.7, rtt=92, rtx=0, c=13, mss=1368, tbw=3209, tp=-1, tpl=-1, uplat=112, ullat=0
X-Fb-Debug
Other
pu33jsJSzo11x4o5JFhbQQwQYcx3GeiL5w/jKfeCDxX4mmT3MuxwX7nwG0gUjEGEldBqx8Fxag9f14VpYLhlYw==
X-Fb-Edge-Debug
Other
TArcmOA412F8EHukZEcOPXwLlc_RB6QZrn3jhh4h7GZWWTjmz9D6a8KgXc2f2uzZx_Fq2a_DdpPDOKI3XL9kGdmT77vMpnflXhlv1YXPwLE

Recommendations

Enable compression (gzip/brotli) to improve performance