HTTP Headers Analysis for https://www.visa.com

Detected Technologies from Headers

See all in URL Inspect 2

Cloudflare CDN

Envoy

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000; includeSubdomains;

Content-Security-Policy

Weak

self Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

strict-origin-when-cross-origin, no-referrer-when-downgrade

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Consider adding Permissions-Policy to control browser features

Performance Headers

3 headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

rsc,next-router-state-tree,next-router-prefetch,next-router-segment-prefetch,Accept-Encoding

Caching Headers

4 headers

Age

Caching

7904

Cache-Control

Caching

public, max-age=14400

Expires

Caching

Mon, 16 Feb 2026 18:05:50 GMT

Last-Modified

Caching

Mon, 16 Feb 2026 11:54:05 GMT

Content Headers

1 headers

Content-Type

Content

text/html; charset=utf-8

Server Headers

1 headers

Server

cloudflare

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

Cookies

_cfuvid=UadnCOWlQtNQcZkxQ6ToLP3Poj6aMc__Pq0yYgcX0Dk-1771250750054-0.0.1.1-604800000; path=/; domain=.visa.com; HttpOnly; Secure; SameSite=None

Other Headers

5 headers

Cf-Cache-Status

Other

HIT

Cf-Ray

Other

9ced9a235a2ce635-IAD

Date

Other

Mon, 16 Feb 2026 14:05:50 GMT

Link

Other

</fonts/VisaDialectUI-Regular-latinwAlts-Web.woff2>; rel=preload; as="font"; crossorigin="anonymous"; type="font/woff2"; fetchpriority="high", </fonts/VisaDialectUI-Medium-latinwAlts-Web.woff2>; rel=preload; as="font"; crossorigin="anonymous"; type="font/woff2"; fetchpriority="high", </fonts/VisaDialectUI-Bold-latinwAlts-Web.woff2>; rel=preload; as="font"; crossorigin="anonymous"; type="font/woff2"; fetchpriority="high", </fonts/VisaDialectUI-Semibold-latinwAlts-Web.woff2>; rel=preload; as="font"; crossorigin="anonymous"; type="font/woff2"; fetchpriority="high", </_next/static/chunks/d4304370d1dac943.css>; rel=preload; as="style", </_next/static/chunks/32c1734dfff9c828.css>; rel=preload; as="style", </_next/static/chunks/0ccb4a6e49eacc0d.css>; rel=preload; as="style", </_next/static/chunks/92e7415a5ddde2ac.css>; rel=preload; as="style", </_next/static/chunks/6f355819a1f53fb2.css>; rel=preload; as="style", </_next/static/chunks/5378bfe167c9b614.css>; rel=preload; as="style", </_next/static/chunks/e8c985ab7b7c1934.css>; rel=preload; as="style", </_next/static/chunks/a4b1774d1956eb71.css>; rel=preload; as="style", </_next/static/chunks/605d0b617e8c203c.css>; rel=preload; as="style", </_next/static/chunks/d286a20aa37ac27d.css>; rel=preload; as="style", </_next/static/chunks/3fd85debd871a771.css>; rel=preload; as="style", </_next/static/chunks/2971b3c833890363.css>; rel=preload; as="style", </_next/static/chunks/e972a0248f7ceb0a.css>; rel=preload; as="style", </_next/static/chunks/5a6fa9fc9d7b966c.css>; rel=preload; as="style", </_next/static/chunks/8947f50b0a395feb.css>; rel=preload; as="style", </_next/static/chunks/38232c01c0bf52d7.css>; rel=preload; as="style", </_next/static/chunks/014fc0bb41a95179.css>; rel=preload; as="style", </_next/static/chunks/9123cfd43a96f7a1.css>; rel=preload; as="style", </_next/static/chunks/1670eea5aa908576.css>; rel=preload; as="style", </_next/static/chunks/ba500b59342b9a56.css>; rel=preload; as="style", </_next/static/chunks/934d114d0d5b3517.css>; rel=preload; as="style", </_next/static/chunks/fa0cf54a2ff131c4.css>; rel=preload; as="style", </_next/static/chunks/90435b925e446025.css>; rel=preload; as="style", </_next/static/chunks/e8ed86ba88de6f06.css>; rel=preload; as="style", </_next/static/chunks/59208d7f2b5d0e18.css>; rel=preload; as="style", </_next/static/chunks/321debafaf7acc42.css>; rel=preload; as="style", </_next/static/chunks/64d3901dda06ed32.css>; rel=preload; as="style", </_next/static/chunks/6ee7ee05380adc9c.css>; rel=preload; as="style", </_next/static/chunks/3fee98dab070b65d.css>; rel=preload; as="style", </_next/static/chunks/5fdf3f48e5815a5c.css>; rel=preload; as="style", </_next/static/chunks/21313854bc6aeb93.css>; rel=preload; as="style", </_next/static/chunks/d87f28a1db65771d.css>; rel=preload; as="style", </_next/static/chunks/f4ebb21b648fa49c.css>; rel=preload; as="style", </_next/static/chunks/3b3ac63c8393f3f1.css>; rel=preload; as="style", </_next/static/chunks/1ee6080b36c01fa0.css>; rel=preload; as="style", </_next/static/chunks/a6f42ee649b7cdf9.css>; rel=preload; as="style", </_next/static/chunks/afa9413543dc804f.css>; rel=preload; as="style", </_next/static/chunks/c939ef4499dac49d.css>; rel=preload; as="style", </_next/static/chunks/883caea15494c6db.css>; rel=preload; as="style", </_next/static/chunks/94019ef84a03b7b0.css>; rel=preload; as="style", </_next/static/chunks/ea900634e4c59724.css>; rel=preload; as="style", </_next/static/chunks/df4f3cab52b7a9b8.css>; rel=preload; as="style", </_next/static/chunks/5409fd22a80a001d.css>; rel=preload; as="style", </_next/static/chunks/632eb1841fae2221.css>; rel=preload; as="style", </_next/static/chunks/4b997a7d58105023.css>; rel=preload; as="style", </_next/static/chunks/95f47bb7d6c1b663.css>; rel=preload; as="style", </_next/static/chunks/43f513d8e3980b81.css>; rel=preload; as="style"

X-Envoy-Upstream-Service-Time

Other

1184

Recommendations

Enable compression (gzip/brotli) to improve performance