31 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=63072000
Content-Security-Policy
Basic
default-src; script-src; script-src-elem; +11 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges
Performance
bytes
Connection
Performance
close
Vary
Performance
Accept-Encoding

Caching Headers

Age
Caching
2296
Cache-Control
Caching
public, max-age=3600
Etag
Caching
"3e8a5a4faf7950bb6e56392d365001cb"
Expires
Caching
Sun, 06 Sep 2026 02:17:26 GMT
Last-Modified
Caching
Sun, 06 Sep 2026 01:14:11 GMT

Content Headers

Content-Length
Content
121553
Content-Type
Content
text/html

Server Headers

Server
Server
Google Frontend

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Date
Other
Sun, 06 Sep 2026 23:45:38 GMT
Via
Other
1.1 google, 1.1 varnish, 1.1 varnish, 1.1 varnish
X-Cache
Other
MISS, HIT, HIT
X-Cache-Hits
Other
0, 2199, 0
X-Cloud-Trace-Context
Other
4403a9d3176e5816fac6d78cd36baffc
X-Goog-Generation
Other
1788657251740048
X-Goog-Hash
Other
crc32c=GDXArw==, md5=PopaT695ULtuVjktNlAByw==
X-Goog-Meta-Goog-Reserved-File-Mtime
Other
1788656366
X-Goog-Metageneration
Other
1
X-Goog-Storage-Class
Other
STANDARD
X-Goog-Stored-Content-Encoding
Other
identity
X-Goog-Stored-Content-Length
Other
121553
X-Guploader-Uploadid
Other
AJjja9Yjqk2qYAkua412JHulCTt-h_zSqTzwtUTSaiHHQE4Aa9yDfGQ-HgL8x0TQBZpR8ITA
X-Served-By
Other
cache-bfi-krnt7300047-BFI, cache-bfi-krnt7300047-BFI, cache-bfi-krnt7300047-BFI, cache-nyc-kteb1890096-NYC
X-Timer
Other
S1788738339.519465,VS0,VE1

Recommendations

Enable compression (gzip/brotli) to improve performance