HTTP Headers Analysis for https://status.ordering.co

Detected Technologies from Headers

See all in URL Inspect 1

Caddy

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000; preload

Content-Security-Policy

Weak

upgrade-insecure-requests Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

geolocation=(), midi=(), microphone=(); +5 more

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

connection: close
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

public, max-age=60, must-revalidate, no-cache, private

cache-control: public, max-age=60, must-revalidate, no-cache, private

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

Server

Caddy

server: Caddy

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: XSRF-TOKEN=eyJpdiI6ImtzdDFyam5XV2FvRk5nZzdyQ3U3OUE9PSIsInZhbHVlIjoiNHVsdFFuY1FWOUxFYUl1WHRLdjIzbTBwWHl0b0dHM2JJR3dNRnpKeHVkQUx2ekVOV3FITXVCdktOekVvZG53MlZkRFd1ajRqY21sZUMyS0NkaVlneTNLMkVzS3dlZVRvcTZnZDBBaXRTU2NIRUxXRE11em1jNzg5UytEL0x1MWoiLCJtYWMiOiI2MmQwZmI3NmU0YjRjZjY5ODUyZmFkYTRlMGY5ZDlkNzQxMGU4YWE4YjBmMDYzNTUzNjI1YzBhOGRkMDU3NmE1IiwidGFnIjoiIn0%3D; expires=Wed, 25 Feb 2026 13:31:20 GMT; Max-Age=604800; path=/; secure; samesite=lax
psp_session=eyJpdiI6IkxHUjljWElUZjlkOGdEaGtpUjgvcmc9PSIsInZhbHVlIjoiSUY1TDh2VHFCeSs2OGtDdVEvK3hOT0RZRW1yRmJPQzRnaDFYbWpkU0VEaGhETTl2dW1CWEFrclZXbTVuNFBtNGJhenVaSjRJMGsvb3B5M3JVSHpPMjZRdDVoUWJqN1lWYTJaSVVXTm40S0toRHFVTTIxZG1NV1ExRHZGcFA5YkwiLCJtYWMiOiI5MTU5OTRhNDhjNGZmZDg5NjRkY2Y3Zjk3YWJiMDAzYTZjOGZiYmNmYjY4NzM0YzNiYWVmZjhiZDE0ZDNhM2JjIiwidGFnIjoiIn0%3D; expires=Wed, 25 Feb 2026 13:31:20 GMT; Max-Age=604800; path=/; secure; httponly; samesite=lax
KE93W1gKcB7GPE8dksUazOERHe4xOfxhN1h0Wv0U=eyJpdiI6IlFpQmJXajdFTlV2a2s2SHBzSFB0RkE9PSIsInZhbHVlIjoiekQzWDBVRXlTcmMxVjljb1ZKRWpLVWQ3eVM2NUorZkVocVM5OUp5aEcwS3MxaDJRS3AzTzk1bGpsZEdNZ2tJT0ZmVEgwRXNaOU1VSlhycmJaa3F0bTFzODhnbTVRNlZ2VE45L3J2VzcwWGY4U2RadzdVc1FMdXNHTVFVK2ZPVW9Lb28wK3I0VWNGU1RZM2NVazJkS2ZuMFpweE1FWmpwRGovb2MrODY4WHZWU1NYcE1yL2JHclpmQU1FdnZ1dzUrUlhnVTU0Mjlra3VJSHcraDRJL2c3c3BsWndiNDNFVUowSWg0dGFtVDRkUjlseW5mREZZWHQ5R0pjbisrbDZoK05XTUhubGt3L0NmUDErMDRMTGFXSFhaWTVlNzVBQnB4VUhRMEQ3bW5VUjRzN280MUdZZElhcHljN0UxS2VCK09uZDc3U0lWUzd2c2UwWmpDT2NHNkZMMG9wR2RMa2hCMXRpcGFPZUFhdjN1aXNwZEtUTnUxNnZadWUvZm5sOEdVIiwibWFjIjoiM2RjYTVmM2U4NjVmMWVjZjA3ZmMzN2RhOTQ3MGM0MmUzZjNmODI5ZDNiMzI5ZTBlZDRjZmM5ZTM5ZTMyZjRmMSIsInRhZyI6IiJ9; expires=Wed, 25 Feb 2026 13:31:20 GMT; Max-Age=604800; path=/; secure; httponly; samesite=lax

Other Headers

Date

Other

Wed, 18 Feb 2026 13:31:20 GMT

date: Wed, 18 Feb 2026 13:31:20 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance