HTTP Headers Analysis for https://ud-sandbox.com

Detected Technologies from Headers

See all in URL Inspect 2

Google Static File Front End

Varnish

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

deny

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Vary

Performance

Accept-Encoding

accept-ranges: bytes
connection: close
vary: Accept-Encoding

Caching Headers

Age

Caching

0

Cache-Control

Caching

no-cache, no-store, private, must-revalidate, max-age=0, max-stale=0, post-check=0, pre-check=0

Expires

Caching

Thu, 01 Jan 1970 00:00:00 GMT

Pragma

Caching

no-cache

age: 0
cache-control: no-cache, no-store, private, must-revalidate, max-age=0, max-stale=0, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache

Content Headers

Content-Length

Content

198287

Content-Type

Content

text/html; charset=utf-8

content-length: 198287
content-type: text/html; charset=utf-8

Server Headers

Server

Google Frontend

server: Google Frontend

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _ud_client_id=v1.eyJpcCI6IjY0LjM0Ljg0LjE0OCIsInRpbWVzdGFtcCI6MTc3NTc2NjgzNywidmVyaWZpZWQiOjB9.7oc8uJNGYrgGV342TJqsSLG/e7tsI4KUrmabwwua+cY=; Path=/; Max-Age=3600; Secure; SameSite=Lax

Other Headers

Alt-Svc

Other

h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Date

Other

Thu, 09 Apr 2026 20:33:57 GMT

Fastly-Debug-Path

Other

(F cache-ewr-kewr1740085-EWR 1775766837) (F cache-chi-kigq8000084-CHI 1775766837)

Surrogate-Control

Other

stale-if-error=86400, stale-while-revalidate=86400, max-age=3600

Surrogate-Key

Other

frontend markdone

Via

Other

1.1 varnish, 1.1 varnish

X-Cache

Other

MISS

X-Cache-Hits

Other

0

X-Debug

Other

(null) F#2(cache-chi-kigq8000084-CHI 1775766837)~MISS@3600*86400,43200_D! D#2(cache-chi-kigq8000084-CHI 1775766837)~MISSR0E0 F#1(cache-ewr-kewr1740085-EWR 1775766837)~MISS@3600*86400,43200_setc_P! D#0(cache-ewr-kewr1740024-EWR 1775766837)~PASSR0E0

X-Debug-Cache-Control

Other

(null)#2(cache-chi-kigq8000084-CHI 1775766837):no-cache, no-store, private, must-revalidate, max-age=0, max-stale=0, post-check=0, pre-check=0#1(cache-ewr-kewr1740085-EWR 1775766837):no-cache, no-store, private, must-revalidate, max-age=0, max-stale=0, post-check=0, pre-check=0#0(cache-ewr-kewr1740024-EWR 1775766837)D:no-cache, no-store, private, must-revalidate, max-age=0, max-stale=0, post-check=0, pre-check=0

X-Debug-Surrogate-Control

Other

(null)#2(cache-chi-kigq8000084-CHI 1775766837):stale-if-error=86400, stale-while-revalidate=86400, max-age=3600#1(cache-ewr-kewr1740085-EWR 1775766837):stale-if-error=86400, stale-while-revalidate=86400, max-age=3600#0(cache-ewr-kewr1740024-EWR 1775766837)D:stale-if-error=86400, stale-while-revalidate=86400, max-age=3600

X-Download-Options

Other

noopen

X-Edge-Generation

Other

7956

X-Served-By

Other

cache-chi-kigq8000043-CHI

X-Shield-Generation

Other

7956

X-Varnish

Other

2235910389, 1789490986

alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
date: Thu, 09 Apr 2026 20:33:57 GMT
fastly-debug-path: (F cache-ewr-kewr1740085-EWR 1775766837) (F cache-chi-kigq8000084-CHI 1775766837)
surrogate-control: stale-if-error=86400, stale-while-revalidate=86400, max-age=3600
surrogate-key: frontend markdone
via: 1.1 varnish, 1.1 varnish
x-cache: MISS
x-cache-hits: 0
x-debug: (null) F#2(cache-chi-kigq8000084-CHI 1775766837)~MISS@3600*86400,43200_D! D#2(cache-chi-kigq8000084-CHI 1775766837)~MISSR0E0 F#1(cache-ewr-kewr1740085-EWR 1775766837)~MISS@3600*86400,43200_setc_P! D#0(cache-ewr-kewr1740024-EWR 1775766837)~PASSR0E0
x-debug-cache-control: (null)#2(cache-chi-kigq8000084-CHI 1775766837):no-cache, no-store, private, must-revalidate, max-age=0, max-stale=0, post-check=0, pre-check=0#1(cache-ewr-kewr1740085-EWR 1775766837):no-cache, no-store, private, must-revalidate, max-age=0, max-stale=0, post-check=0, pre-check=0#0(cache-ewr-kewr1740024-EWR 1775766837)D:no-cache, no-store, private, must-revalidate, max-age=0, max-stale=0, post-check=0, pre-check=0
x-debug-surrogate-control: (null)#2(cache-chi-kigq8000084-CHI 1775766837):stale-if-error=86400, stale-while-revalidate=86400, max-age=3600#1(cache-ewr-kewr1740085-EWR 1775766837):stale-if-error=86400, stale-while-revalidate=86400, max-age=3600#0(cache-ewr-kewr1740024-EWR 1775766837)D:stale-if-error=86400, stale-while-revalidate=86400, max-age=3600
x-download-options: noopen
x-edge-generation: 7956
x-served-by: cache-chi-kigq8000043-CHI
x-shield-generation: 7956
x-varnish: 2235910389, 1789490986

Recommendations

Enable compression (gzip/brotli) to improve performance