Open
Cached
·
just now
18
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31556952; includeSubDomains; preload
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Content-Security-Policy header to prevent XSS attacks
- • Consider adding Permissions-Policy to control browser features
Performance Headers
2 headers
Connection
Performance
close
Vary
Performance
Accept-Encoding
Caching Headers
2 headers
Cache-Control
Caching
max-age=0, private, must-revalidate
Etag
Caching
W/"0b97f068fac27ba0031abbe9f87481ce"
Content Headers
2 headers
Content-Length
Content
121615
Content-Type
Content
text/html; charset=utf-8
Server Headers
1 headers
X-Runtime
Server
0.210516
CORS Headers
0 headers
No CORS headers found
Cookies Headers
1 headers
Set-Cookie
Cookies
_zoomshift_marketing_session=dirImL6qHwoEuJNDG3%2Fd0WyxasuX9UDkq3FeRMW31uTlw8ydE2dii%2B%2Byxr7PFv7ZzddZ4HP%2F7BWBJ2WyUBY%2Fg%2B4tuRZ%2BN%2Bz4%2FJNHXQc%2BxDOXbmap9vKmtatvlGaqxiwJQXPF7pHcAaFwoimo46pAkeRwLG%2Fujz%2FSlO1gcLSDE9WC9KJ%2FXaQdj9y9AqcVBYsdPcvgK35LcPjNcyTd5SPQg1yocP7%2BYmcdyPAqEIzWmuRZlAbNuk%2Fmm9tW8m77HtbAHO3KlbnxZry7z993MiLURQ0Qsv5WMoIj9C6G6YNv%2BwkQrJ04--EHyXzMf3I%2F3lr6bh--tD1qViIHtZtRgPmo2sdgCQ%3D%3D; path=/; secure; HttpOnly; SameSite=Lax
Other Headers
5 headers
Date
Other
Thu, 01 Jan 2026 01:50:21 GMT
Link
Other
<https://www-cloudfront.zoomshift.com/assets/application-a881f9b85b8fe8ed23fa463fb8cb08e7489e0bbe6339e0d653e6d1938d36f793.css>; rel=preload; as=style; nopush,<https://www-cloudfront.zoomshift.com/assets/application-a881f9b85b8fe8ed23fa463fb8cb08e7489e0bbe6339e0d653e6d1938d36f793.css>; rel=preload; as=style; nopush
X-Download-Options
Other
noopen
X-Permitted-Cross-Domain-Policies
Other
none
X-Request-Id
Other
203f7a2f-8f34-4b91-a991-0ddb484e3d09
Recommendations
Enable compression (gzip/brotli) to improve performance