HTTP Headers Analysis for https://www.foxfirstrun.com

Detected Technologies from Headers

See all in URL Inspect 3

AWS

AWS API Gateway

AWS CloudFront

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-cache, private

cache-control: no-cache, private

Content Headers

Content-Length

Content

74062

Content-Type

Content

text/html; charset=UTF-8

content-length: 74062
content-type: text/html; charset=UTF-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: XSRF-TOKEN=eyJpdiI6IkxRVGR1b0NveERiam5BWk5QVkFoN3c9PSIsInZhbHVlIjoiVUFWaUZSaGcrVjNsdGhaamY4UVNDd0NLOFJCVEwvQ3BVdERiVExRdERwaUEvTm1mWHF3akFMaEFLcU8xckFNOG9VLzNvS1JLUWNSUjB2WnJqa2M2RVowaVRuWkoxYzk4bE1GMktjNElRaXp2dGYwK3dteUZmQnQ3UmFQL2lTOGQiLCJtYWMiOiJmNzk3YjhmNmRiNzFkZmQxMWM5MTUxMzY3NTg1MTE3OTU5YTE1MGU4MjE2NDRiYjAyZWVjYzBhODliMDVhOTczIiwidGFnIjoiIn0%3D; expires=Fri, 14-Aug-2026 14:08:53 GMT; Max-Age=7200; path=/; samesite=lax
fox_first_run_session=eyJpdiI6InNka2NmS0R0QmkrREZzTWpqOHRYV1E9PSIsInZhbHVlIjoibXNEOFRadS9TV3dVVUhvOEVCRXhreitBVldkVUlVTFIvdDdLL1VIZ2hhVC9XTGRCazdtZ1lwQXE3Z2YwN1A0Ui95SSs0T1dsWWJzeTJzY3hzY1hsMmRrWVhlV1lOS3pIVTEvQ1RBaTFJWHdGL1V6WTJJaTFJUGJKWjVGcjZkc2EiLCJtYWMiOiI3YTk4ODY5Nzc2MTU2N2VkYTJjOTQ4YWUyZjU0OWUxMDgxY2IxYzAwM2IwNTUwZDFlMDg3MjVhNmEzYzc5MDc0IiwidGFnIjoiIn0%3D; expires=Fri, 14-Aug-2026 14:08:53 GMT; Max-Age=7200; path=/; httponly; samesite=lax
DJIF3Ur6WzpTMTm19tIpNJZvW33lNr3JdUy4TuLD=eyJpdiI6ImRsdDJHay8wRGVGeldGQkdMWVlRa1E9PSIsInZhbHVlIjoicDYvOEhiL0t3Z2syY1RiZ2JDY1lhMGpOYTVEZ1JyMDc2SmFUTnIxUU1hWkJBS0xPa3kxK0NKa1YzYURPQVoxSHQwWHl5ZEQ5YmFjdGowbDZJMmdRTStGRG93TXRkeCtkZUZTcERBNzZVRkhGNUR4TUxTT1dGbXhTQmpYUlgrUGRWa3hKazEvQTk5MHFyeDhVN0g3enpzalhwRXRLYTJyVDcxcFh1VjVaNjhDRktxTTBRY0I0aExVUnhIMUxSOXMxQ3poc2ZsZEM4a1ovUjRudXoxUnhHVmFZK1BLSEdwbmxhRUx3bDJWNEY1SmRrN2tNc1Vyc3UrU1FBbWh0UnloaTVMRDJOcFo3T3cxekdjNTl3Y1FFQXArdkpDblVIQjZ3OWp6aFQ4TjQ2cUtldXdTOXJEODJtRFJBTHhoY3VyeTI1d1RGU2JyUWpVdG1pcVZEaHpNdVkxTkJmSE5iS2tKZlhlcWYydFhudWJlZlF3dkVKR0FXZ0ExVzE2QzZqeDJzIiwibWFjIjoiNjAyNTliMjIwNjAyNDcwZDMwMWVhZTc1YmM1OGY0YmRhMjUxMzYxMmExYzZmMjZkMmUzNzliNjJhMTMyMTFmZCIsInRhZyI6IiJ9; expires=Fri, 14-Aug-2026 14:08:53 GMT; Max-Age=7200; path=/; httponly; samesite=lax

Other Headers

Date

Other

Fri, 14 Aug 2026 12:08:53 GMT

Via

Other

1.1 762f5279d442a3e543b4f8a72db812e0.cloudfront.net (CloudFront)

X-Amz-Apigw-Id

Other

CF3FVHomoAMEsgA=

X-Amz-Cf-Id

Other

XMYVbToYfUUY2974UJKrCJ5sbBksnpKgVKt-YNeAlLL5U8Jp1C49bg==

X-Amz-Cf-Pop

Other

ORD58-P16

X-Amzn-Remapped-Date

Other

Fri, 14 Aug 2026 12:08:53 GMT

X-Amzn-Requestid

Other

2d3e871b-a200-48e8-ae7d-37147b4d68fe

X-Amzn-Trace-Id

Other

Root=1-6a7f0554-7ea1074c3a95de7e28b29ad3;Parent=5ffb720db7ec4bfe;Sampled=0;Lineage=1:a6dbf136:0

X-Cache

Other

Miss from cloudfront

date: Fri, 14 Aug 2026 12:08:53 GMT
via: 1.1 762f5279d442a3e543b4f8a72db812e0.cloudfront.net (CloudFront)
x-amz-apigw-id: CF3FVHomoAMEsgA=
x-amz-cf-id: XMYVbToYfUUY2974UJKrCJ5sbBksnpKgVKt-YNeAlLL5U8Jp1C49bg==
x-amz-cf-pop: ORD58-P16
x-amzn-remapped-date: Fri, 14 Aug 2026 12:08:53 GMT
x-amzn-requestid: 2d3e871b-a200-48e8-ae7d-37147b4d68fe
x-amzn-trace-id: Root=1-6a7f0554-7ea1074c3a95de7e28b29ad3;Parent=5ffb720db7ec4bfe;Sampled=0;Lineage=1:a6dbf136:0
x-cache: Miss from cloudfront

Recommendations

Enable compression (gzip/brotli) to improve performance