PUBLIC OBSERVATION · V1Mon, Aug 24, 2026 5:03 PM

Link Behavior Trace

https://apps.apple.com/us/app/velum-calm-on-demand/id6794340001

Observed result Suspicious signals observed 100% observation completeness

Trace another link

SIGNATURE COMPONENT

LINK BEHAVIOR TRACE

0 transition(s)

Final

apps.apple.com https://apps.apple.com/us/app/velum-calm-on-demand/id6794340001

Observed signals

3 recorded

Response cookie observed without the Secure attribute on an HTTPS page

Observed response headers

LOW

Response cookie observed without the HttpOnly attribute

Observed response headers

INFO

Response cookie observed without a SameSite attribute

Observed response headers

INFO

Landing behavior

Observed response

HTTP status200

Content typetext/html

Forms1

Password inputs0

External domains3

Binary responseNo

Security header configuration

Good

Recommended headers observed4 / 6

Present

strict-transport-securitycontent-security-policyx-frame-optionsx-content-type-options

Not observed

referrer-policypermissions-policy

Response cookies observed

1 cookie(s) observed — 1 without Secure, 1 without HttpOnly, 1 without a SameSite attribute. Cookie names and values are never observed or stored by this scan.

Configuration, not a security guarantee. This describes which response headers were observed, not whether the site is otherwise secure — a "strong" grade means these specific headers were present, nothing more.