HTTP Headers Analysis for https://us.ishares.com

Open Cached · 10h ago

24 Headers

Detected Technologies from Headers

See all in URL Inspect 2

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000;preload

Content-Security-Policy

Good

default-src; font-src; img-src; +8 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Strengthen CSP by removing 'unsafe-eval'
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

no-cache, no-store

Expires

Caching

Tue, 12 May 2026 06:09:22 GMT

cache-control: no-cache, no-store
expires: Tue, 12 May 2026 06:09:22 GMT

Content Headers

Content-Type

Content

text/html;charset=UTF-8

content-type: text/html;charset=UTF-8

Server Headers

Server

Server

istio-envoy

server: istio-envoy

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: ts-us-ishares-locale=en_US; Expires=Sun, 11 May 2031 06:09:22 GMT; Max-Age=157680000; Path=/; Secure; HttpOnly; SameSite=Lax
StatisticalAnalyticsEnabled=true; Expires=Mon, 10 Aug 2026 06:09:22 GMT; Max-Age=7776000; Path=/; Secure; SameSite=Lax
SSESSIONID_blk-one02=ZTU0NDQ0ZWQtMWQ2ZC00ZTUyLTgyNDctZDE1Y2ViNWViZjFl; Path=/; Secure; HttpOnly; SameSite=Lax
STICKY_SESSION_COOKIE_BLK_ONE02_LIVE="5195d79968b35a1b"; Max-Age=3600; Path=/; HttpOnly
DC_STICKY_SESSION_COOKIE=musw2; Path=/; Max-Age=28800; HttpOnly; Secure; SameSite=None

Other Headers

Date

Other

Tue, 12 May 2026 06:09:23 GMT

Link

Other

URL /blk-one02-c-assets/cache-1776782256000/include/common/fonts/fontawesome-5pro/fa-solid-900.woff2

rel=preload as=font type=font/woff2 crossorigin

URL /blk-one02-c-assets/cache-1776782256000/include/common/fonts/fontawesome-5pro/fa-regular-400.woff2

rel=preload as=font type=font/woff2 crossorigin

URL /blk-one02-c-assets/cache-1776782256000/include/common/fonts/fontawesome-5pro/fa-light-300.woff2

rel=preload as=font type=font/woff2 crossorigin

URL /blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFort-Extrabold.woff2

rel=preload as=font type=font/woff2 crossorigin

URL /blk-one02-c-assets/cache-1776782256000/include/common/fonts/fontawesome-5pro/fa-solid-900.woff2

rel=preload as=font type=font/woff2 crossorigin

URL /blk-one02-c-assets/cache-1776782256000/include/common/fonts/fontawesome-5pro/fa-regular-400.woff2

rel=preload as=font type=font/woff2 crossorigin

URL /blk-one02-c-assets/cache-1776782256000/include/common/fonts/fontawesome-5pro/fa-light-300.woff2

rel=preload as=font type=font/woff2 crossorigin

URL /blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFort-Extrabold.woff2

rel=preload as=font type=font/woff2 crossorigin

URL /blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFort-Book.woff2

rel=preload as=font type=font/woff2 crossorigin

URL /blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFort-Bold.woff2

rel=preload as=font type=font/woff2 crossorigin

URL /blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFortCond-Book.woff2

rel=preload as=font type=font/woff2 crossorigin

URL /blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFortCond-BookItalic.woff2

rel=preload as=font type=font/woff2 crossorigin

URL /blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFortCond-Bold.woff2

rel=preload as=font type=font/woff2 crossorigin

URL /blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFortCond-BoldItalic.woff2

rel=preload as=font type=font/woff2 crossorigin

URL /blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFortCond-Light.woff2

rel=preload as=font type=font/woff2 crossorigin

URL /blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFortCond-LightItalic.woff2

rel=preload as=font type=font/woff2 crossorigin

URL https://sourcedefense.blackrock.com

rel=preconnect crossorigin

URL

https://tags.tiqcdn.com

rel=preconnect crossorigin

URL https://services.sdiapi.com

rel=preconnect crossorigin

X-Cache-Status

Other

MISS

X-Envoy-Upstream-Service-Time

Other

27

X-Host-Ref

Other

blk-one02-live-f964f9df7-ndh7n/orca

X-Locale

Other

en_US

X-Page-Name

Other

index

X-Region-Ref

Other

musw2

X-Request-Id

Other

5f597cbd-19db9990d31

X-Site-Name

Other

us-ishares

X-Ua-Compatible

Other

IE=edge

date: Tue, 12 May 2026 06:09:23 GMT
link: </blk-one02-c-assets/cache-1776782256000/include/common/fonts/fontawesome-5pro/fa-solid-900.woff2>; rel="preload"; as="font"; type="font/woff2"; crossorigin, </blk-one02-c-assets/cache-1776782256000/include/common/fonts/fontawesome-5pro/fa-regular-400.woff2>; rel="preload"; as="font"; type="font/woff2"; crossorigin, </blk-one02-c-assets/cache-1776782256000/include/common/fonts/fontawesome-5pro/fa-light-300.woff2>; rel="preload"; as="font"; type="font/woff2"; crossorigin, </blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFort-Extrabold.woff2>; rel="preload"; as="font"; type="font/woff2"; crossorigin, </blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFort-Book.woff2>; rel="preload"; as="font"; type="font/woff2"; crossorigin, </blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFort-Bold.woff2>; rel="preload"; as="font"; type="font/woff2"; crossorigin, </blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFortCond-Book.woff2>; rel="preload"; as="font"; type="font/woff2"; crossorigin, </blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFortCond-BookItalic.woff2>; rel="preload"; as="font"; type="font/woff2"; crossorigin, </blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFortCond-Bold.woff2>; rel="preload"; as="font"; type="font/woff2"; crossorigin, </blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFortCond-BoldItalic.woff2>; rel="preload"; as="font"; type="font/woff2"; crossorigin, </blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFortCond-Light.woff2>; rel="preload"; as="font"; type="font/woff2"; crossorigin, </blk-one02-c-assets/cache-1776782256000/include/common/fonts/blk-fort/BLKFortCond-LightItalic.woff2>; rel="preload"; as="font"; type="font/woff2"; crossorigin, <https://sourcedefense.blackrock.com>; rel=preconnect; crossorigin, <https://tags.tiqcdn.com>; rel=preconnect; crossorigin, <https://services.sdiapi.com>; rel=preconnect; crossorigin
x-cache-status: MISS
x-envoy-upstream-service-time: 27
x-host-ref: blk-one02-live-f964f9df7-ndh7n/orca
x-locale: en_US
x-page-name: index
x-region-ref: musw2
x-request-id: 5f597cbd-19db9990d31
x-site-name: us-ishares
x-ua-compatible: IE=edge

Recommendations

Enable compression (gzip/brotli) to improve performance