21 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Weak
frame-ancestors
X-Frame-Options
Good
sameorigin
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Significantly strengthen CSP directives
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

Performance Headers

1 headers
Connection
Performance
keep-alive

Caching Headers

1 headers
Cache-Control
Caching
max-age=1800

Content Headers

3 headers
Content-Disposition
Content
inline; filename*=UTF-8''index.html
Content-Length
Content
7369
Content-Type
Content
text/html; charset=UTF-8

Server Headers

0 headers
No server headers found

CORS Headers

0 headers
No CORS headers found

Cookies Headers

1 headers
Set-Cookie
Cookies
akaas_aud-seg-ocom-prod=2147483647~rv=73~id=a38d81665970541dcff730b128a7a52a; path=/

Other Headers

10 headers
Actual-Object-Ttl
Other
3600
Akamai-Grn
Other
0.25643017.1762632184.860d7410
Akamai-Request-Bc
Other
[a=23.48.100.37,b=2249028624,c=g,n=US_VA_ASHBURN,o=20940]
Date
Other
Sat, 08 Nov 2025 20:03:05 GMT
Origin-Cache-Control
Other
no-cache, no-store
Origin-Edge-Control
Other
NO_HEADER_PRESENTED
Server-Timing
Other
ak_p; desc="1762632184991_389047333_2249028624_46_8155_2_0_-";dur=1
X-Akamai-Transformed
Other
9 - 0 pmb=mRUM,2
X-Oracle-Dms-Ecid
Other
006GlcjBTRwFs1KimTCwkJ0000qT003Nit
X-Oracle-Dms-Rid
Other
0:1

Recommendations

Enable compression (gzip/brotli) to improve performance

Analysis completed in 352ms