Open
Cached
·
just now
17
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Consider adding Permissions-Policy to control browser features
Performance Headers
2 headers
Connection
Performance
close
Transfer-Encoding
Performance
chunked
Caching Headers
2 headers
Cache-Control
Caching
max-age=0, private, must-revalidate
Etag
Caching
W/"d18727d0448e73ae32e698ce7444056f"
Content Headers
1 headers
Content-Type
Content
text/html; charset=utf-8
Server Headers
2 headers
Server
Server
nginx/1.18.0 (Ubuntu)
X-Runtime
Server
0.006066
CORS Headers
0 headers
No CORS headers found
Cookies Headers
1 headers
Set-Cookie
Cookies
_app_session=DKtlVqEAuc9wpMAmsxxSNtNy4IxqCYo9MWjXIZmVZxqgtL1tAKdv4NO466828b7TQbFB5iOVn2RqUvOBBU5cUAeenNsX1Uuwmcs4Ym8jYZV3Y7%2Fw0szZsgrkTDTChTMp6Jqypl3FmJP1Q3lowOGzfSia%2BLMniXuQilywUyitP6rTvPf%2BckKJM%2BlZh%2Bp2lpA1nB09B0Fzf0A1WIymlq6jVMnp7EYKyhHbfKQkPXaTsoPCeQUILigrGhCosymPg3nmFu5eIjxFpgm9uKFbjIss499R3FI%3D--tB5yPwKsdXyYXCHX--uqpHEkxQWNlntDuAiGxwKw%3D%3D; path=/; HttpOnly; SameSite=Lax
Other Headers
5 headers
Date
Other
Sat, 13 Dec 2025 00:51:47 GMT
Link
Other
</assets/application-fd64e65a18d46661ebb3f448b8eb0818444fad3ff5d40159c6279b14a8a0df01.css>; rel=preload; as=style; nopush
X-Download-Options
Other
noopen
X-Permitted-Cross-Domain-Policies
Other
none
X-Request-Id
Other
c10a879c-c2ad-45cb-8854-53fa42071ef6
Recommendations
Enable compression (gzip/brotli) to improve performance
Analysis completed in 1678ms