HTTP Headers Analysis for https://sylveos.com

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Basic

default-src

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

autoplay=(self "https://youtube.com" "https://www.facebook.com" "https://www.dailymotion.com" "https://www.vimeo.com"),fullscreen=(self "https://www.youtube.com" "https://www.facebook.com" "https://www.dailymotion.com" "https://www.vimeo.com"),geolocation=(self),accelerometer=(),ambient-light-sensor=(),battery=(),camera=(),display-capture=(),document-domain=(),encrypted-media=(),execution-while-not-rendered=(),execution-while-out-of-viewport=(),gamedpad=(),gyroscope=(),hid=(),identity-credentials-get=(),idle-detection=(),local-fonts=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),publickey-credentials-create=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),speaker-selection=(),storage-access=(),usb=(),xr-spatial-tracking=()

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'

Performance Headers

2 headers

Connection

Performance

close

Vary

Performance

Accept-Encoding

Caching Headers

3 headers

Cache-Control

Caching

public max-age=36000

Etag

Caching

"694cfbb9-24ff8"

Last-Modified

Caching

Thu, 25 Dec 2025 08:54:17 GMT

Content Headers

2 headers

Content-Length

Content

152371

Content-Type

Content

text/html

Server Headers

0 headers

No server headers found

CORS Headers

0 headers

No CORS headers found

Cookies Headers

0 headers

No cookies headers found

Other Headers

4 headers

Date

Other

Thu, 25 Dec 2025 10:56:17 GMT

X-Cache-File

Other

sylveos.com/index-https.html

X-Cache-Use-Cache

Other

HIT

X-Robots-Tag

Other

all;

Recommendations

Enable compression (gzip/brotli) to improve performance