Cached · just now
31 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=63072000; includeSubDomains; preload
Content-Security-Policy
Basic
default-src; style-src; script-src; +14 more Analyze
Content-Security-Policy-Report-Only
Strong
default-src; font-src; img-src; +5 more Analyze
X-Frame-Options
Present
SAMEORIGIN, SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
strict-origin-when-cross-origin, strict-origin-when-cross-origin
Permissions-Policy
Present
microphone=(), camera=(), microphone=(); +1 more
Recommendations
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'

Performance Headers

Connection
Performance
close
Transfer-Encoding
Performance
chunked
Vary
Performance
Accept-Encoding

Caching Headers

Age
Caching
35970
Cache-Control
Caching
public, max-age=86400
Expires
Caching
Sat, 08 Aug 2026 19:37:57 GMT
Last-Modified
Caching
Fri, 07 Aug 2026 09:38:26 GMT

Content Headers

Content-Type
Content
text/html; charset=UTF-8

Server Headers

Server
Server
cloudflare
X-Powered-By
Server
PleskLin

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Cf-Apo-Via
Other
origin,nohtml
Cf-Cache-Status
Other
HIT
Cf-Edge-Cache
Other
cache,platform=wordpress
Cf-Ray
Other
a278bd2508d8b8b1-IAD
Cross-Origin-Embedder-Policy-Report-Only
Other
require-corp; report-to="default"
Cross-Origin-Opener-Policy-Report-Only
Other
same-origin; report-to="default"
Date
Other
Fri, 07 Aug 2026 19:37:57 GMT
Link
Other
Nel
Other
Report-To Group not specified
Permissions-Policy-Report-Only
Other
microphone=();report-to=default, camera=(self "https://www.viafirma.com");report-to=default, fullscreen=*;report-to=default, payment=self;report-to=default
Report-To
Other
Group default max-age: 18w
Reporting-Endpoints
Other
default="https://b9u7tqjq.uriports.com/reports", default="https://b9u7tqjq.uriports.com/reports"
Server-Timing
Other
cfCacheStatus;desc="HIT", cfEdge;dur=11,cfOrigin;dur=0
Wpo-Cache-Status
Other
saving to cache

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology