Open
Cached
·
just now
34
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
Content-Security-Policy
Weak
report-to; report-uri
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=()
Recommendations
- • Significantly strengthen CSP directives
Performance Headers
3 headers
Connection
Performance
keep-alive
Transfer-Encoding
Performance
chunked
Vary
Performance
Accept-Encoding,Cookie
Caching Headers
3 headers
Age
Caching
36
Cache-Control
Caching
max-age=600, must-revalidate
Last-Modified
Caching
Mon, 17 Nov 2025 16:57:14 GMT
Content Headers
1 headers
Content-Type
Content
text/html; charset=UTF-8
Server Headers
2 headers
Server
Server
cloudflare
X-Powered-By
Server
WP Engine
CORS Headers
2 headers
Access-Control-Allow-Headers
Cors
Content-Type, Authorization
Access-Control-Allow-Methods
Cors
GET,POST
Cookies Headers
1 headers
Set-Cookie
Cookies
__cf_bm=kQkKz1t7ix4prtKEZOHSKxJ..iQwbUo44IYW6NcgDac-1763398670-1.0.1.1-sqCP_Asv_MS7Stp61Suw9LNIXTWPF5JVr7Tq_WRE_NElEOwLlwtqsvRCATDKSsJ1AjlxQ9TgeY7cg5U3AL8jWiLL7GccCMPl1C7lxRQeRA0; path=/; expires=Mon, 17-Nov-25 17:27:50 GMT; domain=.travasecurity.com; HttpOnly; Secure; SameSite=None
Other Headers
13 headers
Alt-Svc
Other
h3=":443"; ma=86400
Cf-Cache-Status
Other
HIT
Cf-Ray
Other
9a00c4f8ae4d4b8a-IAD
Content-Security-Policy-Report-Only
Other
report-to https://report.centralcsp.com/68f8eb863bf8b7a78b67ab9e; report-uri https://report.centralcsp.com/68f8eb863bf8b7a78b67ab9e;
Cross-Origin-Embedder-Policy-Report-Only
Other
unsafe-none; report-to='default'
Cross-Origin-Opener-Policy-Report-Only
Other
unsafe-none; report-to='default'
Date
Other
Mon, 17 Nov 2025 16:57:50 GMT
Link
Other
<https://travasecurity.com/>; rel=shortlink
X-Cache
Other
HIT: 1
X-Cache-Group
Other
normal
X-Cacheable
Other
SHORT
X-Content-Security-Policy
Other
default-src 'self'; img-src *; media-src * data:;
X-Permitted-Cross-Domain-Policies
Other
none
Recommendations
Enable compression (gzip/brotli) to improve performance
Consider removing X-Powered-By header to hide server technology
Analysis completed in 112ms