HTTP Headers Analysis for https://student-orgs.org

Open Cached · just now

28 Headers

Detected Technologies from Headers

See all in URL Inspect 7

Cloudflare NEL Monitoring

Cloudflare CDN

Google Fonts

Google Hosted Libraries

jQuery

jQuery Migrate

Shopify

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=7889238

Content-Security-Policy

Weak

block-all-mixed-content; frame-ancestors; upgrade-insecure-requests Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

Transfer-Encoding

Performance

chunked

Vary

Performance

accept-encoding

connection: close
transfer-encoding: chunked
vary: accept-encoding

Caching Headers

Etag

Caching

W/"page_cache:54982836297:IndexController:f68c08ea22e2d44bdf770de6e3f9cac7"

etag: W/"page_cache:54982836297:IndexController:f68c08ea22e2d44bdf770de6e3f9cac7"

Content Headers

Content-Language

Content

en-US

Content-Type

Content

text/html; charset=utf-8

content-language: en-US
content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

set-cookie: localization=US; path=/; expires=Sat, 14 Aug 2027 02:24:52 GMT; SameSite=Lax
cart_currency=USD; path=/; expires=Fri, 28 Aug 2026 02:24:52 GMT; SameSite=Lax
_shopify_y=2ef513e5-fb6a-4bbd-83ad-edd8dcacda89; domain=student-orgs.org; path=/; expires=Sat, 14 Aug 2027 08:24:52 GMT; SameSite=Lax
_shopify_s=4630505f-6005-45bb-8d83-06a7770ec850; domain=student-orgs.org; path=/; expires=Fri, 14 Aug 2026 02:54:52 GMT; SameSite=Lax
_shopify_essential=:AZ_-FiWcAAEAuHA8BGIH26JYrD3R0xsd9KI_Dah3xJqQB5MxQF0aW6bZgjUosH0XM-hIY2MSbJZWz_fJVP7Yovwv0UDUkkpkD_EJa9P4PX-mDE7jnk1DPCTShGrrKic4WCwFl32WxV5c2ZMBfFGgZaSAOXywOW0eNgemfW7YNYTCCxGAdrPPbgCIws67R-tuv8r5zOVUaweOicIbAaTFumLc7picdyMH8vl4wt0uHec2qyIehhKmJ-6XOd006xhQ_KBCAIBoZUH3a72mS_h13TW4Em7yu0Gqwzxhw5izGda9oOLhN6oXUtFHa8-qEJkmCGXIFrLWAEgm6qObPICm-ruNJSaOSP2Q4WJN_vB9E9DQcCmXS24SQTMAHPtIrPO4vTxQVEgnOsRV1uQoICt1-UGw7PFfpx-4O9cwQHTh4k5rzxnE1-P8G2wqjcWW4Ajedhmo8NZS-ijm_GAsNt3lq4jir1Nd4x077fAkLcCGfpn7XW-uFqXjwUHhj5B6WdhrPJZAh8BkOU2wKHmyWar2o7fDZ2WZkcuSLfdEDPgF1W3EOd4:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax
_shopify_analytics=:AZ_-FiZbAAEAv9wSjeA1r-A5DQCKs_24Boy4XPBZ4UTONI2E1MKexvSVmwnMwnPNTdkeRy9nbJmX4BuIYZnObJcEWwLA7M7Z6vFUdXEWVYxmqMF4Eb01c2b_3AoTjI93MytT5HxOlAl3QdyO:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax
_shopify_marketing=:AZ_-FiZbAAEAljWgZvi3p3In3vM9ZPb1PGfQes6GJXbF3CQnFzaVcwUCS1z7oNfZvfatC7R7MNgA-4feThMZ5CxyIDch_FPnhOB8pJHLR1kltKqkPc7SRtQlgZMbtSsqmEU4:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

a2ac81757df44b20-IAD

Date

Other

Fri, 14 Aug 2026 02:24:52 GMT

Link

Other

URL

https://cdn.shopify.com

rel=preconnect

URL

https://cdn.shopify.com

rel=preconnect crossorigin

URL

https://fonts.googleapis.com

rel=preconnect

URL https://searchserverapi.com

rel=preconnect

URL

https://cdn.shopify.com

rel=preconnect

URL

https://cdn.shopify.com

rel=preconnect crossorigin

URL

https://fonts.googleapis.com

rel=preconnect

URL https://searchserverapi.com

rel=preconnect

URL

https://ajax.googleapis.com

rel=preconnect

URL //student-orgs.org/cdn/shop/t/3/assets/theme.scss.css?v=163265449699487316411702133992

as=style rel=preload

URL

//fonts.googleapis.com/css?family=Lato:400,700

as=style rel=preload

URL

//fonts.googleapis.com/css?family=Roboto:400

as=style rel=preload

URL //searchserverapi.com/widgets/shopify/init.js?a=3Z6O8S0L6v

as=script rel=preload

URL

//ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js

as=script rel=preload

URL

//code.jquery.com/jquery-migrate-1.2.1.min.js

as=script rel=preload

URL //student-orgs.org/cdn/shop/t/3/assets/bold-options.css?v=152676727512600995221658081391

as=style rel=preload

URL https://option.boldapps.net/js/options.js

as=script rel=preload

URL //student-orgs.org/cdn/shop/t/3/assets/bold-po-custom.css?v=102058608524168931201658081391

as=style rel=preload

URL //student-orgs.org/cdn/shop/t/3/assets/bold-helper-functions.js?v=33303035930909860941658081419

as=script rel=preload

Nel

Other

Report-To Group cf-nel max-age: 1w

success: 1.0%

Powered-By

Other

Shopify

Report-To

Other

Group cf-nel max-age: 1w

Endpoint 1 https://a.nel.cloudflare.com/report/v4?s=O%2Bcrfkw0CnWozDSk1TA7rE7Z22oak%2BvQveH10gHTu27MNDC%2Ft8CW5vVbI%2F0hGpn3di1TZgfki%2BVIBeHEq1RtxOiColuj7JJ990b8aHQcazW04%2FiXM2tbC0d4tgnslLSdjqc%3D

Server-Timing

Other

processing;dur=213;desc="gc:2", db;dur=124, db_async;dur=9.042, render;dur=29, asn;desc="60068", edge;desc="IAD", country;desc="US", theme;desc="124149006409", pageType;desc="index", servedBy;desc="qb88", requestID;desc="de6d6343-3eb0-429f-ac52-1f056466fb83-1786674292", _y;desc="2ef513e5-fb6a-4bbd-83ad-edd8dcacda89", _s;desc="4630505f-6005-45bb-8d83-06a7770ec850", _cmp;desc="3.AMPS_USVA_f_f_ZEq-72t*SJyirc9-vINZAQ", compressionLevel;desc="5", compressionTime;dur=3.917

Shopify-Complexity-Score

Other

2070

Shopify-Complexity-Score-V2

Other

207

X-Dc

Other

gcp-us-east1,gcp-us-east1,gcp-us-east1

X-Download-Options

Other

noopen

X-Permitted-Cross-Domain-Policies

Other

none

X-Request-Id

Other

de6d6343-3eb0-429f-ac52-1f056466fb83-1786674292

alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
cf-ray: a2ac81757df44b20-IAD
date: Fri, 14 Aug 2026 02:24:52 GMT
link: <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossorigin, <https://fonts.googleapis.com>; rel="preconnect", <https://searchserverapi.com>; rel="preconnect", <https://ajax.googleapis.com>; rel="preconnect", <//student-orgs.org/cdn/shop/t/3/assets/theme.scss.css?v=163265449699487316411702133992>; as="style"; rel="preload", <//fonts.googleapis.com/css?family=Lato:400,700>; as="style"; rel="preload", <//fonts.googleapis.com/css?family=Roboto:400>; as="style"; rel="preload", <//searchserverapi.com/widgets/shopify/init.js?a=3Z6O8S0L6v>; as="script"; rel="preload", <//ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js>; as="script"; rel="preload", <//code.jquery.com/jquery-migrate-1.2.1.min.js>; as="script"; rel="preload", <//student-orgs.org/cdn/shop/t/3/assets/bold-options.css?v=152676727512600995221658081391>; as="style"; rel="preload", <https://option.boldapps.net/js/options.js>; as="script"; rel="preload", <//student-orgs.org/cdn/shop/t/3/assets/bold-po-custom.css?v=102058608524168931201658081391>; as="style"; rel="preload", <//student-orgs.org/cdn/shop/t/3/assets/bold-helper-functions.js?v=33303035930909860941658081419>; as="script"; rel="preload"
nel: {"report_to":"cf-nel","success_fraction":0.01,"max_age":604800}
powered-by: Shopify
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=O%2Bcrfkw0CnWozDSk1TA7rE7Z22oak%2BvQveH10gHTu27MNDC%2Ft8CW5vVbI%2F0hGpn3di1TZgfki%2BVIBeHEq1RtxOiColuj7JJ990b8aHQcazW04%2FiXM2tbC0d4tgnslLSdjqc%3D"}]}
server-timing: processing;dur=213;desc="gc:2", db;dur=124, db_async;dur=9.042, render;dur=29, asn;desc="60068", edge;desc="IAD", country;desc="US", theme;desc="124149006409", pageType;desc="index", servedBy;desc="qb88", requestID;desc="de6d6343-3eb0-429f-ac52-1f056466fb83-1786674292", _y;desc="2ef513e5-fb6a-4bbd-83ad-edd8dcacda89", _s;desc="4630505f-6005-45bb-8d83-06a7770ec850", _cmp;desc="3.AMPS_USVA_f_f_ZEq-72t*SJyirc9-vINZAQ", compressionLevel;desc="5", compressionTime;dur=3.917
shopify-complexity-score: 2070
shopify-complexity-score-v2: 207
x-dc: gcp-us-east1,gcp-us-east1,gcp-us-east1
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: de6d6343-3eb0-429f-ac52-1f056466fb83-1786674292

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching