HTTP Headers Analysis for https://www.webfg.com

Detected Technologies from Headers

See all in URL Inspect 21

AWS API Gateway

Plyr

Akamai Active incidents

Amplitude

AWS Active incidents

AWS CloudFront

GitHub

Google Analytics

Google API JS Client

Google Cloud Functions

Google Cloud Storage

Google DoubleClick

Google reCAPTCHA

Google Search

Google Static File Front End

Google Tag Manager

jsDelivr

Microsoft Clarity

Vimeo

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=63072000; includeSubdomains; preload

Content-Security-Policy

Basic

default-src; script-src; style-src; +7 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

same-origin

Permissions-Policy

Present

geolocation=(self), microphone=(), camera=(); +1 more

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

connection: close, Transfer-Encoding
transfer-encoding: chunked

Caching Headers

No caching headers found

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

aHR0cHM6Ly95b3V0dS5iZS9BX2ZDdjc2YzR1UT95b3VzaG91bGRudD1jb21laGVyZWFsb25l

server: aHR0cHM6Ly95b3V0dS5iZS9BX2ZDdjc2YzR1UT95b3VzaG91bGRudD1jb21laGVyZWFsb25l

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _abck=42839F60BB71103A4369CE7CBB708640~-1~YAAQcQ80FykOggSgAQAAGFutEhDkcDjPLsu35Bt6vTw12mKWzviUUGkicNSHw3N7rj/hNuyWrUgpw/XjtbtuWbIeSdU1dhR/Bwtklkh7/DUv/1QPk7V+cwewWYPLcDnS5QO9X3R8FFzW4x9GbQppEZziD0glz8ebFmYQ+vFAIVr8aWAbesbi0pg04vuMvg+hYUzQDaXJtFjPCYjstzjCrA9Yz5RPk3zHRNHVIzK8IXVxEx1VWmdQ312GR/svEykJOV7uRh70ewxa928hutWh8m4zXFupDzZjg5G0tJ0Xm3V9toINQ+0ZWAbFor9cuDTaKZ9Np148U7xUL5+XL0AK6eKIh4qbLtVVgabU/tSrVsgbaPZ5IfYU1eZElduLKHU9NhkHgYRKw1UlPKr6aCSckrNItzJRvbNmCpUOBnBHDZfG3gRI+A7C3QMku5pOf/zsNKVg3dT/2Q==~-1~-1~-1~-1~-1; Domain=.allfunds.com; Path=/; Expires=Wed, 18 Aug 2027 02:22:26 GMT; Max-Age=31536000; Secure
bm_sz=221EFCADF1DA31CFC00468EDC8CAB8E7~YAAQcQ80FyoOggSgAQAAGFutEgAZ9VCzezu23prZirYAY9FierIdFlnwOX+x5qd+BhsAISW1fmZq9LjxMp1l5E0ga7QTDbVlHWE8+2Fv3jWvvHkbKY73XgMVW7flAZlDnFxPR5sbv1Gvn87rOjWYgwfk5VFm+iP0jqlsYl0ix5iYVOHxpKo3oHTL/14TRn0g4taZKAmqAg+EhZ1fwF+t5o+lYGxOTUDKOXUvSmI1NBFI4EkUh2jW2B7XfsAqhUbfAB3QYywmXcpWx2Zw7lkNiE/0Zc1eC8iZQm+Y/a2RbE1VZGMDAzygh2EXEaPvkPP34NMiuYbHBjtaJcrenOZlmnPaQrGioyMaxsZ0EahV6sA=~3555896~3682610; Domain=.allfunds.com; Path=/; Expires=Tue, 18 Aug 2026 06:22:25 GMT; Max-Age=14399

Other Headers

Date

Other

Tue, 18 Aug 2026 02:22:26 GMT

Server-Timing

Other

cdn-cache; desc=MISS, edge; dur=124, origin; dur=142, ak_p; desc="1787019745520_389287793_1699821295_26554_9359_73_163_-";dur=1

X-Akamai-Transformed

Other

9 - 0 pmb=mRUM,1

X-Amz-Cf-Id

Other

9ECRdgpTtLz2PdOeGykdyRqC9S-QBhMBxUOZEv-1a3bTiE_0y3Cg7w==

X-Amz-Cf-Pop

Other

CDG52-P2

date: Tue, 18 Aug 2026 02:22:26 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=124, origin; dur=142, ak_p; desc="1787019745520_389287793_1699821295_26554_9359_73_163_-";dur=1
x-akamai-transformed: 9 - 0 pmb=mRUM,1
x-amz-cf-id: 9ECRdgpTtLz2PdOeGykdyRqC9S-QBhMBxUOZEv-1a3bTiE_0y3Cg7w==
x-amz-cf-pop: CDG52-P2

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching