30 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=7889238
Content-Security-Policy
Weak
block-all-mixed-content; frame-ancestors; upgrade-insecure-requests Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • • Significantly strengthen CSP directives
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

Performance Headers

Vary
Performance
accept-encoding

Caching Headers

Cache-Control
Caching
private, max-age=0, must-revalidate
Etag
Caching
W/"sfr:computation:v2:db74ee43223c52f7254787fbee173ed681267da3acf7b394a9c9e434eebc9f60:1ec1ebb2494a3b90f37aa959a0eca04a"

Content Headers

Content-Language
Content
en-US
Content-Type
Content
text/html; charset=utf-8

Server Headers

Server
Server
cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie
Cookies

Other Headers

Accept-Ch
Other
Sec-CH-Viewport-Width
Alt-Svc
Other
h3=":443"; ma=86400
Cdn-Cache-Control
Other
no-cache, no-store
Cf-Cache-Status
Other
DYNAMIC
Cf-Ray
Other
a568d4dece1e8292-IAD
Date
Other
Sat, 07 Nov 2026 02:15:40 GMT
Link
Other
Nel
Other
Report-To Group cf-nel max-age: 1w
success: 1.0%
Powered-By
Other
Shopify
Product-Filtering-Backend
Other
bitset_roaring
Server-Timing
Other
processing;dur=120, db;dur=61, render;dur=33, asn;desc="30081", edge;desc="IAD", country;desc="US", theme;desc="139139547309", pageType;desc="index", servedBy;desc="9gbh", requestID;desc="10f3f517-d585-4208-9237-3a552aadd23f-1794017740", _y;desc="fafaa338-442f-4188-b92c-42f0a1c1da99", _s;desc="4ca11408-93f3-4276-b95c-5fe86b424996", _cmp;desc="3.AMPS_USIL_f_f_iQnwT1r0Sda6HDxMjmXo0A", _ye;desc="1825575340", _se;desc="1794019540", compressionLevel;desc="5", compressionTime;dur=9.219
Shopify-Complexity-Score
Other
1180
Shopify-Complexity-Score-V2
Other
118
X-Dc
Other
gcp-us-east1,gcp-us-east1,gcp-us-east1
X-Download-Options
Other
noopen
X-Permitted-Cross-Domain-Policies
Other
none
X-Request-Id
Other
10f3f517-d585-4208-9237-3a552aadd23f-1794017740

Recommendations

Enable compression (gzip/brotli) to improve performance