Open Cached · just now
17 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer-when-downgrade
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Consider adding Permissions-Policy to control browser features

Performance Headers

3 headers
Connection
Performance
keep-alive
Transfer-Encoding
Performance
chunked
Vary
Performance
Accept-Encoding

Caching Headers

2 headers
Age
Caching
0
Cache-Control
Caching
private

Content Headers

1 headers
Content-Type
Content
text/html; charset=UTF-8

Server Headers

1 headers
Server
Server
ATS

CORS Headers

0 headers
No CORS headers found

Cookies Headers

1 headers
Set-Cookie
Cookies
PROMO=ltv_pid=&ltv_new=1&ltv_ts=1762974547&ltv_sts=1762974547&ltv_c=1; expires=Thu, 12-Nov-2026 19:09:07 GMT; Max-Age=31536000; path=/; domain=.search.yahoo.com

Other Headers

4 headers
Date
Other
Wed, 12 Nov 2025 19:09:07 GMT
P3p
Other
policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
Secure_search_bypass
Other
true
X-Envoy-Upstream-Service-Time
Other
36

Recommendations

Enable compression (gzip/brotli) to improve performance

Analysis completed in 1585ms