HTTP Headers Analysis for https://system1.com

Detected Technologies from Headers

See all in URL Inspect 15

Adobe Fonts (Typekit)

Apache

AWS

AWS CloudFront

Amazon S3

Debian

Google Analytics

Google DoubleClick

Google Search

Google Static File Front End

Google Tag Manager

Lever

OneTrust

YouTube

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=10886400

Content-Security-Policy

Basic

default-src; img-src Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Present

unsafe-url

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

connection: close
transfer-encoding: chunked
vary: Accept-Encoding

Caching Headers

No caching headers found

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

Server

Apache/2.4.59 (Debian)

server: Apache/2.4.59 (Debian)

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Date

Other

Wed, 25 Feb 2026 07:10:40 GMT

Link

Other

URL https://system1.com/

rel=shortlink

Server-Timing

Other

cdn-upstream-layer;desc="REC",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=2,cdn-upstream-fbl;dur=46,cdn-cache-miss,cdn-pop;desc="IAD61-P10",cdn-rid;desc="84iT3ucioREk0xLHTlBo667Y8AO0LDcYiF4J1pV_MHKRp1uolz_IWA==",cdn-downstream-fbl;dur=54

Via

Other

1.1 70e9f6c79b570a07593d98d3c3eb2fc6.cloudfront.net (CloudFront)

X-Amz-Cf-Id

Other

84iT3ucioREk0xLHTlBo667Y8AO0LDcYiF4J1pV_MHKRp1uolz_IWA==

X-Amz-Cf-Pop

Other

IAD61-P10

X-Cache

Other

Miss from cloudfront

alt-svc: h3=":443"; ma=86400
date: Wed, 25 Feb 2026 07:10:40 GMT
link: <https://system1.com/>; rel=shortlink
server-timing: cdn-upstream-layer;desc="REC",cdn-upstream-dns;dur=0,cdn-upstream-connect;dur=2,cdn-upstream-fbl;dur=46,cdn-cache-miss,cdn-pop;desc="IAD61-P10",cdn-rid;desc="84iT3ucioREk0xLHTlBo667Y8AO0LDcYiF4J1pV_MHKRp1uolz_IWA==",cdn-downstream-fbl;dur=54
via: 1.1 70e9f6c79b570a07593d98d3c3eb2fc6.cloudfront.net (CloudFront)
x-amz-cf-id: 84iT3ucioREk0xLHTlBo667Y8AO0LDcYiF4J1pV_MHKRp1uolz_IWA==
x-amz-cf-pop: IAD61-P10
x-cache: Miss from cloudfront

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching