Cached · just now
31 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=63072000; includeSubDomains; preload
Content-Security-Policy
Basic
default-src; style-src; script-src; +14 more Analyze
Content-Security-Policy-Report-Only
Strong
default-src; font-src; img-src; +5 more Analyze
X-Frame-Options
Present
SAMEORIGIN, SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
strict-origin-when-cross-origin, strict-origin-when-cross-origin
Permissions-Policy
Present
microphone=(), camera=(), microphone=(); +1 more
Recommendations
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'

Performance Headers

Connection
Performance
close
Transfer-Encoding
Performance
chunked
Vary
Performance
Accept-Encoding

Caching Headers

Age
Caching
68449
Cache-Control
Caching
public, max-age=86400
Expires
Caching
Wed, 12 Aug 2026 06:11:23 GMT
Last-Modified
Caching
Mon, 10 Aug 2026 11:10:34 GMT

Content Headers

Content-Type
Content
text/html; charset=UTF-8

Server Headers

Server
Server
cloudflare
X-Powered-By
Server
PleskLin

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Cf-Apo-Via
Other
origin,nohtml
Cf-Cache-Status
Other
HIT
Cf-Edge-Cache
Other
cache,platform=wordpress
Cf-Ray
Other
a295152a2dca3496-IAD
Cross-Origin-Embedder-Policy-Report-Only
Other
require-corp; report-to="default"
Cross-Origin-Opener-Policy-Report-Only
Other
same-origin; report-to="default"
Date
Other
Tue, 11 Aug 2026 06:11:23 GMT
Link
Other
Nel
Other
Report-To Group not specified
Permissions-Policy-Report-Only
Other
microphone=();report-to=default, camera=(self "https://www.viafirma.com");report-to=default, fullscreen=*;report-to=default, payment=self;report-to=default
Report-To
Other
Group default max-age: 18w
Reporting-Endpoints
Other
default="https://b9u7tqjq.uriports.com/reports", default="https://b9u7tqjq.uriports.com/reports"
Server-Timing
Other
cfCacheStatus;desc="HIT", cfEdge;dur=9,cfOrigin;dur=0
Wpo-Cache-Status
Other
saving to cache

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology