HTTP Headers Analysis for https://ww8.basspro.com

Detected Technologies from Headers

See all in URL Inspect 1

Akamai

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=15768000 ; includeSubDomains ; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-cache, no-store, must-revalidate

Expires

Caching

0

Pragma

Caching

no-cache

cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache

Content Headers

Content-Length

Content

632

Content-Type

Content

text/html;charset=UTF-8

content-length: 632
content-type: text/html;charset=UTF-8

Server Headers

Server

AkamaiGHost

server: AkamaiGHost

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: IpState=IL; path=/; domain=basspro.com
IpZipCode=60601-60626+60628-60634+60636-60641+60643-60647+60649+60651-60657+60659-60661+60664+60668-60670+60673-60675+60677-60678+60680-60682+60684-60691+60693-60695+60697+60699+60701; path=/; domain=basspro.com
IpGeo=Country-US_Region-State-IL_City-CHICAGO_Zip-60601-60626+60628-60634+60636-60641+60643-60647+60649+60651-60657+60659-60661+60664+60668-60670+60673-60675+60677-60678+60680-60682+60684-60691+60693-60695+60697+60699+60701_DMA-602_MSA-1602_PMSA-1600; path=/; domain=basspro.com
akavpau_c_=1774538028~id=5f8bb587f1a355b107133d85c5025e7e; Domain=www.basspro.com; Path=/; HttpOnly; Secure; SameSite=None
_bmdet=b111769210a046488426ae627ee5d385; path=/; domain=.www.basspro.com; Secure

Other Headers

Date

Other

Thu, 26 Mar 2026 15:08:48 GMT

Mime-Version

Other

1.0

Server-Timing

Other

cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1774537728367_390233291_863153275_25_29979_24_45_-";dur=1

X-Akam-Sw-Version

Other

0.5.0

date: Thu, 26 Mar 2026 15:08:48 GMT
mime-version: 1.0
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1774537728367_390233291_863153275_25_29979_24_45_-";dur=1
x-akam-sw-version: 0.5.0

Recommendations

Enable compression (gzip/brotli) to improve performance