HTTP Headers Analysis for https://timescard.com

Open Cached · just now

29 Headers

Detected Technologies from Headers

See all in URL Inspect 1

Akamai

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=25920000; includeSubdomains

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

sameorigin

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

no-cache, max-age=0

Pragma

Caching

no-cache

cache-control: no-cache, max-age=0
pragma: no-cache

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Akamai-Origin-Hop

Other

Date

Other

Thu, 07 May 2026 00:33:21 GMT

Front-End-Https

Other

Host

Other

vsp2hdfcbank.timescard.com

Https

Other

false

Link

Other

URL /credit/_next/static/media/0832ea062595d9d6-s.p.woff

rel=preload as=font crossorigin type=font/woff

URL /credit/_next/static/media/726c327559404260-s.p.woff

rel=preload as=font crossorigin type=font/woff

URL /credit/_next/static/media/7331f03d48262a8d-s.p.woff

rel=preload as=font crossorigin type=font/woff

URL /credit/_next/static/media/94d5c45eebb34057-s.p.woff

rel=preload as=font crossorigin type=font/woff

Server-Timing

Other

cdn-cache; desc=MISS, edge; dur=1364, origin; dur=62, ak_p; desc="1778113999484_388045973_605585261_142286_53984_21_90_-";dur=1

User-Agent

Other

mint/1.7.1

X-Akamai-Config-Log-Detail

Other

true

X-Akamai-Transformed

Other

9 20022 0 pmb=mRUM,1

X-Current-Path

Other

/login

X-Forwarded-For

Other

172.29.108.27, 64.34.81.172, 23.33.28.149, 117.239.189.122

X-Forwarded-Host

Other

vsp2hdfcbank.timescard.com

X-Forwarded-Port

Other

X-Forwarded-Proto

Other

http

X-Forwarded-Scheme

Other

http

X-Original-Forwarded-For

Other

64.34.81.172, 23.33.28.149, 117.239.189.122

X-Real-Ip

Other

172.29.108.27

X-Request-Id

Other

7706338c00ef4bdcc605dfc53e0635a6

X-Scheme

Other

http

akamai-origin-hop: 2
date: Thu, 07 May 2026 00:33:21 GMT
front-end-https: on
host: vsp2hdfcbank.timescard.com
https: false
link: </credit/_next/static/media/0832ea062595d9d6-s.p.woff>; rel=preload; as="font"; crossorigin=""; type="font/woff", </credit/_next/static/media/726c327559404260-s.p.woff>; rel=preload; as="font"; crossorigin=""; type="font/woff", </credit/_next/static/media/7331f03d48262a8d-s.p.woff>; rel=preload; as="font"; crossorigin=""; type="font/woff", </credit/_next/static/media/94d5c45eebb34057-s.p.woff>; rel=preload; as="font"; crossorigin=""; type="font/woff", </credit/_next/static/media/timescard-logo.f7ca2e64.svg>; rel=preload; as="image"
server-timing: cdn-cache; desc=MISS, edge; dur=1364, origin; dur=62, ak_p; desc="1778113999484_388045973_605585261_142286_53984_21_90_-";dur=1
user-agent: mint/1.7.1
x-akamai-config-log-detail: true
x-akamai-transformed: 9 20022 0 pmb=mRUM,1
x-current-path: /login
x-forwarded-for: 172.29.108.27, 64.34.81.172, 23.33.28.149, 117.239.189.122
x-forwarded-host: vsp2hdfcbank.timescard.com
x-forwarded-port: 80
x-forwarded-proto: http
x-forwarded-scheme: http
x-original-forwarded-for: 64.34.81.172, 23.33.28.149, 117.239.189.122
x-real-ip: 172.29.108.27
x-request-id: 7706338c00ef4bdcc605dfc53e0635a6
x-scheme: http

Recommendations

Enable compression (gzip/brotli) to improve performance