HTTP Headers Analysis for https://www.freeclimb.com

Detected Technologies from Headers

See all in URL Inspect 2

Cloudflare CDN

Imperva

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

accept-encoding

connection: close
transfer-encoding: chunked
vary: accept-encoding

Caching Headers

Age

Caching

62385

Last-Modified

Caching

Tue, 28 Apr 2026 17:07:27 GMT

age: 62385
last-modified: Tue, 28 Apr 2026 17:07:27 GMT

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _cfuvid=Vv108QzqxndiZvC1GUOgDct8T9rP0cJ8wMFIOdB7YPM-1777458432.0489807-1.0.1.1-nAgHR123bFJRB.HcqyL6.6qwDE9X2o1pFYoX6OgIwFU; HttpOnly; SameSite=None; Secure; Path=/; Domain=www1.freeclimb.com
visid_incap_2183472=GmDkTv22QYqVG21bigeFdP/c8WkAAAAAQUIPAAAAAADcHq2t5Pqz0GwWslG/bUJ5; expires=Thu, 29 Apr 2027 07:04:07 GMT; HttpOnly; path=/; Domain=.freeclimb.com; Secure; SameSite=None
nlbi_2183472=i/kqFwD9mCM0pKFXF6FFUwAAAACouyYf96aYisaGIidyvaLA; HttpOnly; path=/; Domain=.freeclimb.com; Secure; SameSite=None
incap_ses_1844_2183472=DlH3IOOWiyT8Vl9v7jSXGf/c8WkAAAAAJbJX30EWFyySlq6gwavzmQ==; path=/; Domain=.freeclimb.com; Secure; SameSite=None

Other Headers

Cf-Cache-Status

Other

HIT

Cf-Ray

Other

9f3d9ce04c5d172b-IAD

Date

Other

Wed, 29 Apr 2026 10:27:12 GMT

Surrogate-Control

Other

max-age=432000

Surrogate-Key

Other

www1.freeclimb.com 64f74cfbd963ce769566a4cf pageId:673506192f87ef1db1d54339 64f74cfcd963ce769566a686

X-Cdn

Other

Imperva

X-Iinfo

Other

60-122654527-122654547 NNNN CT(20 16 0) RT(1777458431835 170) q(0 0 1 5) r(1 1) U24

X-Lambda-Id

Other

7bc4c6c9-237f-4139-9312-fa57480b70d1

X-Wf-Region

Other

us-east-1

cf-cache-status: HIT
cf-ray: 9f3d9ce04c5d172b-IAD
date: Wed, 29 Apr 2026 10:27:12 GMT
surrogate-control: max-age=432000
surrogate-key: www1.freeclimb.com 64f74cfbd963ce769566a4cf pageId:673506192f87ef1db1d54339 64f74cfcd963ce769566a686
x-cdn: Imperva
x-iinfo: 60-122654527-122654547 NNNN CT(20 16 0) RT(1777458431835 170) q(0 0 1 5) r(1 1) U24
x-lambda-id: 7bc4c6c9-237f-4139-9312-fa57480b70d1
x-wf-region: us-east-1

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching