HTTP Headers Analysis for https://www.joinpru.com.ph

Detected Technologies from Headers

See all in URL Inspect 5

Google Search

Google Static File Front End

Imperva Active incidents

YouTube

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Weak

frame-src; child-src; form-action; +2 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

geolocation=(), camera=(), microphone=()

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Transfer-Encoding

Performance

chunked

accept-ranges: bytes
connection: close
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

no-store, no-cache, must-revalidate, proxy-revalidate

Etag

Caching

W/"2d1-19c8a093c38"

Expires

Caching

0

Last-Modified

Caching

Mon, 23 Feb 2026 10:26:27 GMT

Pragma

Caching

no-cache

cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
etag: W/"2d1-19c8a093c38"
expires: 0
last-modified: Mon, 23 Feb 2026 10:26:27 GMT
pragma: no-cache

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: acn-kv4mgb-joinpru-www.joinpru.com.ph-443-_CORS=ddaf7ce4e6866198a8f545b051895f17; Path=/; SameSite=None; Secure
acn-kv4mgb-joinpru-www.joinpru.com.ph-443-_=ddaf7ce4e6866198a8f545b051895f17; Path=/
visid_incap_2133464=JH8N4YCiS4O2b1JVaJkqeVnAoWoAAAAAQUIPAAAAAAADGgHmGRiRT51rW7iL5DDQ; expires=Thu, 09 Sep 2027 06:51:30 GMT; HttpOnly; path=/; Domain=.joinpru.com.ph; Secure; SameSite=None
nlbi_2133464=rqNbCvohPRo9RENDzCzFNwAAAABJUWl9FkN4YDWwdQFixkSf; HttpOnly; path=/; Domain=.joinpru.com.ph; Secure; SameSite=None
incap_ses_1021_2133464=/N4HB17fRW9jNEVRHlIrDlrAoWoAAAAADYDO5+bCxCDHrLCFYlR+9Q==; path=/; Domain=.joinpru.com.ph; Secure; SameSite=None

Other Headers

Date

Other

Wed, 09 Sep 2026 20:23:54 GMT

Surrogate-Control

Other

no-store

X-Cdn

Other

Imperva

X-Content-Security-Policy

Other

frame-src 'self' www.youtube.com www.google.com www.gstatic.com; child-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'self'

X-Iinfo

Other

52-106503476-106503713 NNNN CT(234 490 0) RT(1788985433038 643) q(0 0 8 1) r(10 10) U12

X-Webkit-Csp

Other

frame-src 'self' www.youtube.com www.google.com www.gstatic.com; child-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'self'

date: Wed, 09 Sep 2026 20:23:54 GMT
surrogate-control: no-store
x-cdn: Imperva
x-content-security-policy: frame-src 'self' www.youtube.com www.google.com www.gstatic.com; child-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'self'
x-iinfo: 52-106503476-106503713 NNNN CT(234 490 0) RT(1788985433038 643) q(0 0 8 1) r(10 10) U12
x-webkit-csp: frame-src 'self' www.youtube.com www.google.com www.gstatic.com; child-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'self'

Recommendations

Enable compression (gzip/brotli) to improve performance