404, Not Found - Sofi

The page has neither an X-Frame-Options header nor a CSP frame-ancestors directive, so it can be embedded in an iframe on any site, making it vulnerable to clickjacking attacks. Read more

Sub-resources returned 4xx or 5xx status codes. Broken scripts, stylesheets, or images can degrade functionality and user experience. Read more

Without HSTS, browsers can be tricked into loading the site over plain HTTP, exposing traffic to interception. Add a Strict-Transport-Security header with a long max-age. Read more

No <link rel="canonical"> was found. Without it, search engines may index duplicate URLs and dilute ranking signals. Add a canonical tag pointing to the preferred URL. Read more

Without a <meta name="viewport"> tag, mobile browsers render the page at desktop width and scale it down. Add a viewport meta tag to ensure proper responsive behavior. Read more

The response does not include Cache-Control or Expires headers. Browsers will use heuristic caching, which can serve stale content or skip caching entirely. Set explicit cache directives. Read more

Static assets (JS, CSS, images, fonts) are served without Cache-Control or Expires headers. Browsers will re-download them on every visit. Set long cache lifetimes with content-hashed filenames. Read more

No <meta name="description"> was found. Search engines use this for snippet text in results. Add a concise, relevant description to improve click-through rates. Read more

JavaScript errors or failed requests can break functionality. Open the console to investigate. Read more

The following headers reveal server software: server: nginx/1.24.0 (Ubuntu). Remove or genericize these headers to reduce information leakage for attackers. Read more