HTTP Headers Analysis for https://stoneshot.com

Detected Technologies from Headers

See all in URL Inspect 4

Cloudflare NEL Monitoring

Cloudflare CDN

Kinsta

Varnish

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Good

default-src; object-src; style-src; +1 more Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

accept-ranges: bytes
connection: close
transfer-encoding: chunked
vary: Accept-Encoding

Caching Headers

No caching headers found

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: __cf_bm=dCtCHQGfEqAjk4vpUGvVgXZEVsB9MfkdQUzXgAqfzvo-1793641924.97251-1.0.1.1-9dwp6tqHW3OUgJBTMayepkyxj2OiKxWdUzJZnQhj8GsXmfdEzVASymvz7q9GCzIg1R_5VfPw.8qByxPSQBzWD3uVfAK_rajohKweW9IhEGMqdv6FlK4s3Qh3a8jIz0vs; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.stoneshot.com; Expires=Mon, 02 Nov 2026 18:22:05 GMT

Other Headers

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

a544fdaf0e7b41ba-EWR

Date

Other

Mon, 02 Nov 2026 17:52:05 GMT

Ki-Cache-Type

Other

None

Ki-Cf-Cache-Status

Other

BYPASS

Ki-Edge

Other

v=28.6.2;mv=99.9.9

Ki-Origin

Other

o1i

Link

Other

URL https://www.stoneshot.com/wp-json/

rel=https://api.w.org/

URL https://www.stoneshot.com/wp-json/wp/v2/pages/13044

rel=alternate title=JSON type=application/json

URL https://www.stoneshot.com/

rel=shortlink

Nel

Other

Report-To Group cf-nel max-age: 1w

success: 1.0%

Report-To

Other

Group cf-nel max-age: 1w

Endpoint 1 https://a.nel.cloudflare.com/report/v4?s=m1SYUkWH5ThdEJAgQcChZq6Ng5nmqsOpYNwFDkCFGCsD2Nj7I2jdCFc1ojmcuAQQLa3SHZtvU6OS5rZY%2BE3Qp%2Fd7%2BzGIu699z231NBOcIxbvJ6u2ampPHR2A7SGjdOgJ%2BDDB

Via

Other

1.1 varnish

X-Cache

Other

MISS

X-Cache-Hits

Other

0

X-Edge-Location-Klb

Other

1

X-Kinsta-Cache

Other

HIT

X-Served-By

Other

cache-ewr-kewr1740062-EWR

X-Timer

Other

S1793641925.957848,VS0,VE591

cf-cache-status: DYNAMIC
cf-ray: a544fdaf0e7b41ba-EWR
date: Mon, 02 Nov 2026 17:52:05 GMT
ki-cache-type: None
ki-cf-cache-status: BYPASS
ki-edge: v=28.6.2;mv=99.9.9
ki-origin: o1i
link: <https://www.stoneshot.com/wp-json/>; rel="https://api.w.org/", <https://www.stoneshot.com/wp-json/wp/v2/pages/13044>; rel="alternate"; title="JSON"; type="application/json", <https://www.stoneshot.com/>; rel=shortlink
nel: {"report_to":"cf-nel","success_fraction":0.01,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=m1SYUkWH5ThdEJAgQcChZq6Ng5nmqsOpYNwFDkCFGCsD2Nj7I2jdCFc1ojmcuAQQLa3SHZtvU6OS5rZY%2BE3Qp%2Fd7%2BzGIu699z231NBOcIxbvJ6u2ampPHR2A7SGjdOgJ%2BDDB"}]}
via: 1.1 varnish
x-cache: MISS
x-cache-hits: 0
x-edge-location-klb: 1
x-kinsta-cache: HIT
x-served-by: cache-ewr-kewr1740062-EWR
x-timer: S1793641925.957848,VS0,VE591

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching