17 Headers

Detected Technologies from Headers

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Basic
default-src; report-uri
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer-when-downgrade
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Consider adding Permissions-Policy to control browser features

Performance Headers

3 headers
Accept-Ranges
Performance
bytes
Connection
Performance
Transfer-Encoding
Transfer-Encoding
Performance
chunked

Caching Headers

4 headers
Cache-Control
Caching
max-age=14400
Etag
Caching
W/"44725-64aac835c3d8a"
Expires
Caching
Sat, 14 Feb 2026 02:26:40 GMT
Last-Modified
Caching
Fri, 13 Feb 2026 03:50:58 GMT

Content Headers

1 headers
Content-Type
Content
text/html;charset=utf-8

Server Headers

1 headers
Server
Server
Apache

CORS Headers

1 headers
Access-Control-Allow-Origin
Cors
*

Cookies Headers

1 headers
Set-Cookie
Cookies
bm_sz=C5B00B5453023FB5C982A2A514227DB4~YAAQjcgwF8TAKkecAQAAIQcdWR6HfYjDZ6RQi+UFeQQt30ukHStyTDZz97cSTfb3BpBPScgOg3jYEW+un/Zig/f3E/PpvTnHY+9JCXZHQbnloz3Hfy0dkJsbJzSPAmZRUR57PmdjSLIsMS4gnx0A9U0yRdcV21VtUNU3tyK+7RATG/1Vyk9AhceDkBe91NVhecQ+M5xeUaaXsBdx2KkB38UT6eKWPndQbrc/hK3o8pmqzXt5aaoioNZrtWuppzL8WZEdip1K6GoHvwD/z4SzCOOnrgjC1idLubzatJiKMHsyxaKGosp4+j8eMaI1Td6xViwHmvcgLqAjv21Mpv9SkYHajmzuL4J/C1w4sQc2~3749443~3424816; Domain=.usbank.com; Path=/; Expires=Sat, 14 Feb 2026 02:26:40 GMT; Max-Age=14400

Other Headers

2 headers
Date
Other
Fri, 13 Feb 2026 22:26:40 GMT
X-Akamai-Transformed
Other
0 - 0 -

Recommendations

Enable compression (gzip/brotli) to improve performance