DNS Gurus
Cached · just now
16 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=63072000
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer-when-downgrade
Permissions-Policy
Missing
Not configured
Recommendations
  • • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Consider adding Permissions-Policy to control browser features

Performance Headers

1 headers
Connection
Performance
close

Caching Headers

2 headers
Cache-Control
Caching
private, no-store, must-revalidate
Expires
Caching
Fri, 02 Jan 2026 07:13:28 GMT

Content Headers

2 headers
Content-Length
Content
46021
Content-Type
Content
text/html;charset=UTF-8

Server Headers

1 headers
Server
Server
nginx

CORS Headers

0 headers
No CORS headers found

Cookies Headers

1 headers
Set-Cookie
Cookies
JSESSIONID=5A489825D9D7085754C204C738582E04; Path=/; Secure; HttpOnly

Other Headers

4 headers
Content-Security-Policy-Report-Only
Other
report-uri https://csp.tpgl.io; default-src 'none'; connect-src 'self' https://hcaptcha.com https://*.hcaptcha.com; font-src 'self' https://fonts.gstatic.com/; frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; img-src 'self' data: https://googleads.g.doubleclick.net/pagead/ https://www.google.com/cse/ https://www.google.co.nz/pagead/ https://www.google.com/pagead/ https://www.googletagmanager.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com https://ajax.googleapis.com/ajax/ https://cse.google.com/ https://googleads.g.doubleclick.net/pagead/ https://www.google.co.nz/pagead/ https://www.google.com/cse/static/ https://www.google.com/pagead/ https://www.google.com/recaptcha/ https://www.googleadservices.com/pagead/ https://www.googletagmanager.com/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com https://fonts.googleapis.com/ https://www.google.com/cse/; frame-ancestors 'self'; upgrade-insecure-requests;
Date
Other
Fri, 02 Jan 2026 07:13:29 GMT
X-Cache-Status
Other
MISS
X-Server-Id
Other
ccefe483

Recommendations

Enable compression (gzip/brotli) to improve performance