SSL Verification Bypassed

The server's SSL certificate could not be verified (likely missing intermediate certificates). The analysis was completed using insecure mode. Data may be less reliable.

12 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

Performance Headers

2 headers
Accept-Ranges
Performance
bytes
Vary
Performance
x-fh-requested-host, accept-encoding

Caching Headers

1 headers
Cache-Control
Caching
max-age=0

Content Headers

2 headers
Content-Length
Content
21265
Content-Type
Content
text/html; charset=utf-8

Server Headers

0 headers
No server headers found

CORS Headers

0 headers
No CORS headers found

Cookies Headers

0 headers
No cookies headers found

Other Headers

6 headers
Alt-Svc
Other
h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Date
Other
Mon, 24 Nov 2025 13:39:09 GMT
X-Cache
Other
MISS
X-Cache-Hits
Other
0
X-Served-By
Other
cache-ewr-kewr1740042-EWR
X-Timer
Other
S1763991549.064587,VS0,VE30

Recommendations

Enable compression (gzip/brotli) to improve performance

Analysis completed in 181ms