HTTP Headers Analysis for https://webforms.playstation.com

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

sameorigin

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer

Permissions-Policy

Present

accelerometer=(self), ambient-light-sensor=(self), autoplay=(self); +23 more

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-cache, private

cache-control: no-cache, private

Content Headers

Content-Length

Content

942

Content-Type

Content

text/html; charset=UTF-8

content-length: 942
content-type: text/html; charset=UTF-8

Server Headers

Server

WebForms

X-Powered-By

Server

WebForms

server: WebForms
x-powered-by: WebForms

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: webforms_session=eyJpdiI6IjJnQnZ3MVdYRDZOSC84emN5RE8xa0E9PSIsInZhbHVlIjoiZHB1TzdCS2ZmY2JjZms2NHRyTnh0L2JMR2VML1BxMnp5NTlsU3RaQUVPMDAvaWRoMzdmTEc5U2dBSlBDYVduRXRrM0tBQ05yQzdWT2IvT0dNWFdaUXBrN2loa3E4QkZ6WXBhbjJpQkNuSVVMOERSQ0ZheGs0aVhCWEZRZzA2Nk8iLCJtYWMiOiIzNDEwNDIyM2U1Y2U5MTNhYTliZDdlMDYzMjc3YWI5MDdiZjQ1YTQxOThhNmZhMTUyYjE5YzRmYWJkN2Q2NDJiIiwidGFnIjoiIn0%3D; path=/; secure; httponly; samesite=lax

Other Headers

Date

Other

Tue, 05 May 2026 21:00:28 GMT

Upgrade

Other

h2,h2c

X-Download-Options

Other

noopen

X-Permitted-Cross-Domain-Policies

Other

none

X-Which-Host-Am-I

Other

(null)

date: Tue, 05 May 2026 21:00:28 GMT
upgrade: h2,h2c
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-which-host-am-i: (null)

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology