HTTP Headers Analysis for https://www.remarkable.donmorris.com

Detected Technologies from Headers

See all in URL Inspect 1

Google Static File Front End

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

object-src; base-uri; script-src; +1 more Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

none

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

accept-ranges: none
connection: close
transfer-encoding: chunked
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

private, max-age=0

Expires

Caching

-1

cache-control: private, max-age=0
expires: -1

Content Headers

Content-Type

Content

text/html; charset=ISO-8859-1

content-type: text/html; charset=ISO-8859-1

Server Headers

Server

gws

server: gws

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: __Secure-STRP=AEEP7gL2d5svtAHqyTbUDcaX2q-edEpdrhR11RJ7GgZ71NN4LRf5AXBWKqalfr6Nsb8-FnxJ2gt2xsSRZ0enQOTEAwX_f1fmvQeX; expires=Sat, 02-May-2026 14:38:40 GMT; path=/; domain=.google.com; Secure; SameSite=strict
AEC=AaJma5vDkojN17lmdxhUhAR_RMxUvlwaahwrAmORji7Sf7ZR2Hu8icadfw; expires=Thu, 29-Oct-2026 14:33:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
NID=531=CNcBrwmrAI_jSjLF8oC6phiYcUHe56Qu70Tv6tsqa3xDBk_OxHer29QJ4krmEZtq5Sos4RXrak7yOTAF81SjqLhPStazS8X120Sh9aQITymjnWYpZ4lbC-4G2rmTKl9kqpG4n6vSymzxLaIf99zSnrAkSTg0TrjkdfE2ZnICk4PJDWhki6rJzAMg3igd_DHeZdDC9HeiIDUoZ3SOyDkbgV14KL145fCsRl1tp0M; expires=Sun, 01-Nov-2026 14:33:40 GMT; path=/; domain=.google.com; HttpOnly

Other Headers

Date

Other

Sat, 02 May 2026 14:33:40 GMT

P3p

Other

CP="This is not a P3P policy! See g.co/p3phelp for more info."

date: Sat, 02 May 2026 14:33:40 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."

Recommendations

Enable compression (gzip/brotli) to improve performance