DNS Gurus
Open Cached · just now
43 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=15768000; includeSubdomains; preload;
Content-Security-Policy
Good
default-src; font-src; script-src; +7 more
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
no-referrer, strict-origin-when-cross-origin
Permissions-Policy
Present
geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Recommendations
  • • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • • Strengthen CSP by removing 'unsafe-eval'

Performance Headers

2 headers
Connection
Performance
close
Vary
Performance
Accept-Encoding

Caching Headers

2 headers
Cache-Control
Caching
s-maxage=60, stale-while-revalidate
Etag
Caching
"b9c1uapu825iu6"

Content Headers

2 headers
Content-Length
Content
258191
Content-Type
Content
text/html; charset=utf-8

Server Headers

2 headers
Server
Server
nginx
X-Powered-By
Server
Next.js

CORS Headers

3 headers
Access-Control-Allow-Headers
Cors
aau-search-url, X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version
Access-Control-Allow-Methods
Cors
GET,OPTIONS,POST
Access-Control-Allow-Origin
Cors
*

Cookies Headers

1 headers
Set-Cookie
Cookies
ARRAffinitySameSite=135b9a99f8b072edf02a32778bbfda4ba8e2dfb0f4d6b679502e0d22801f7e03;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.aau.dk

Other Headers

24 headers
Client-Ip
Other
[fd40:4bde:12:6e2b:7912:100:a4c:1f04]:52634
Date
Other
Sat, 06 Dec 2025 00:22:46 GMT
Disguised-Host
Other
www.aau.dk
Host
Other
www.aau.dk
Max-Forwards
Other
10
Original-Path
Other
/
User-Agent
Other
mint/1.7.1
Was-Default-Hostname
Other
prod-aaudxp-website-001-app.azurewebsites.net
X-Appservice-Proto
Other
https
X-Arr-Log-Id
Other
2e60c564-a477-4cbb-879d-384d9155b9df
X-Arr-Ssl
Other
2048|256|CN=Microsoft Azure RSA TLS Issuing CA 08, O=Microsoft Corporation, C=US|CN=*.azurewebsites.net, O=Microsoft Corporation, L=Redmond, S=WA, C=US
X-Client-Ip
Other
10.76.31.4
X-Client-Port
Other
0
X-Forwarded-For
Other
216.246.40.66, 10.76.31.4
X-Forwarded-Host
Other
www.aau.dk
X-Forwarded-Port
Other
8080
X-Forwarded-Proto
Other
https
X-Forwarded-Tlsversion
Other
1.3
X-Middleware-Rewrite
Other
/_sites/aHR0cHM6Ly93d3cuYWF1LmRr/ISR/
X-Nextjs-Cache
Other
HIT
X-Original-Url
Other
/
X-Real-Ip
Other
216.246.40.66
X-Site-Deployment-Id
Other
prod-aaudxp-website-001-app
X-Waws-Unencoded-Url
Other
/

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology

Analysis completed in 831ms