14 Headers

Detected Technologies from Headers

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

Performance Headers

Connection
Performance
close
Transfer-Encoding
Performance
chunked

Caching Headers

No caching headers found

Content Headers

Content-Type
Content
text/html; charset=UTF-8

Server Headers

Server
Server
nginx

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Accept-Ch
Other
viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-Ch-Lifetime
Other
30
Date
Other
Thu, 19 Feb 2026 20:17:57 GMT
Via
Other
0.0 Caddy
X-Adblock-Key
Other
MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_rT0eCuLP3sjcGGYJoB/oI3wxFWfwhWSwopRMe4vTpXV7jl1P5P/v3SJyaWm3k2TZYTB33ChZ7JQoJKUQOyg28g==
X-Domain
Other
dropglide.xyz
X-Pcrew-Blocked-Reason
Other
hosting network
X-Pcrew-Ip-Organization
Other
Deft Hosting
X-Redirect
Other
skenzo
X-Subdomain
Other
ww38.visual

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching