HTTP Headers Analyzer
5 / 10
https://xxxpornsex.top
Website → Browser9 missing headers, 2 warnings, 0 notices
Header
Value
Explanation
date
sat, 21 dec 2024 15:42:15 gmt
The date and time at which the request was made. A browser uses it for age calculations rather than using its own internal date and time; e.g. when comparing against
Max-Age
or Expires
.content-length
1182
The size of the message body, in bytes.
x-request-id
aba09cdb-d595-4585-bc2d-9a9bbca6fb55
A unique identifier for the HTTP request. This can be useful for tracking a request through complex systems or for debugging purposes.
cache-control
no-store, max-age=0
Warning
Warning Because
no-store
means the response may not be stored in any cache, including the browser's cache.max-age
specifies the maximum amount of seconds a page is considered valid. The higher max-age
, the longer a page can be cached.Warning Because
max-age
is set to 0 seconds, nothing will ever be cached in shared caches or browsers. Caching is effectively disabled!accept-ch
sec-ch-prefers-color-scheme
The
Accept-CH
header specifies HTTP Client Hints that the server requests from the client (typically a browser) to optimize content delivery.
critical-ch
sec-ch-prefers-color-scheme
vary
sec-ch-prefers-color-scheme
The
Vary
header specifies a list of headers that must be considered when caching responses. For a cached response to be used, these headers must match between the cached response and the new request. This ensures that the appropriate version of a resource is served based on factors like language, encoding, or device type.x-adblock-key
mfwwdqyjkozihvcnaqebbqadswawsajbandrp2lz7aomadan8ta50lswcjlfyqfcb/p2txc58oyoeilb3vbw7j6f4pamkaqvsquqyskx3yzduhcvbvzvfuscaweaaq==_qrhh7gor96uvmobaduktac5kdeizhj0ks60sfnw/zgwztecqie1fk+as1wvteyzvilzvbv4saubitwxrazg5da==
set-cookie
parking_session=aba09cdb-d595-4585-bc2d-9a9bbca6fb55; expires=sat, 21 dec 2024 15:57:15 gmt; path=/
A cookie that was sent from the server to the browser.
expires=
sets the maximum lifetime of the cookie using a specific date.path=
indicates the path that must exist in the requested URL for the browser to send the cookie.strict-transport-security
missing Add a
Strict-Transport-Security
header. The Strict-Transport-Security
header or HSTS header is used to instruct browsers to only use HTTPS, instead of using HTTP. It helps enforce secure communication.content-security-policy
missing Add a
Content-Security-Policy
header. The Content-Security-Policy
header helps browsers prevent cross site scripting (XSS) and data injection attacks.referrer-policy
missing Add a
Referrer-Policy
header. When a visitor navigates from one page to another, browsers often pass along referrer information. The Referrer-Policy
header controls how much referrer information a browser can share. This is important to configure when private information is embedded in the path or query string and passed onto an external destination.permissions-policy
missing Add a
Permissions-Policy
header. Restrict access to device features like the camera, microphone, location, accelerometer and much more.cross-origin-embedder-policy
missing Add a
Cross-Origin-Embedder-Policy
to specify how this page can be loaded by cross-origin resources.cross-origin-opener-policy
missing Add a
Cross-Origin-Opener-Policy
header to opt-in into better browser isolation.cross-origin-resource-policy
missing Add a
Cross-Origin-Resource-Policy
header to specify who can load this page.x-frame-options
missing Add a
X-Frame-Options
header. The X-Frame-Options
header prevents this URL from being embedded in an iframe
. This protects against clickjacking attacks. Alternatively, set a Content-Security-Policy
header with a frame-ancestor
directive.x-permitted-cross-domain-policies
missing Add a
X-Permitted-Cross-Domain-Policies
header to prevent Flash, Adobe Reader and other clients from sharing data across domains.Questions or feedback? Email dries@buytaert.net.