HTTP Headers Analysis for https://3853656.group6.sites.hubspot.net

Detected Technologies from Headers

See all in URL Inspect 2

Cloudflare NEL Monitoring

Cloudflare CDN

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Basic

script-src; connect-src; form-action Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

origin, accept-encoding

connection: close
transfer-encoding: chunked
vary: origin, accept-encoding

Caching Headers

Cache-Control

Caching

s-maxage=30,max-age=30

cache-control: s-maxage=30,max-age=30

Content Headers

Content-Type

Content

text/html;charset=utf-8

content-type: text/html;charset=utf-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

Access-Control-Allow-Credentials

Cors

false

access-control-allow-credentials: false

Cookies Headers

Set-Cookie

Cookies

set-cookie: __cf_bm=vUZXV9usTNLFtiQJd0fY_hhLh.zc2KcS.8wT0vY28aM-1784793037.943886-1.0.1.1-x5O5AOPutqS_EO6JuFKr9YE3OdARZQzmRKN6ZyU9g33n2h7NT24D0lNdFH5D1GmN27uLtVqGVdhIs6LXZ3itIO00QnaPtXX4syhEbkeTpLZCbP91NwphAPMX3.HI6hrA; HttpOnly; SameSite=None; Secure; Path=/; Domain=hubspot.net; Expires=Thu, 23 Jul 2026 08:20:37 GMT

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

a1f918672de557f3-IAD

Date

Other

Thu, 23 Jul 2026 07:50:37 GMT

Nel

Other

Report-To Group cf-nel max-age: 1w

success: 1.0%

Report-To

Other

Group cf-nel max-age: 1w

Endpoint 1 https://a.nel.cloudflare.com/report/v4?s=j6HUchs%2BWxm0hDRsxMTiRxsMtG4UgCcGWh%2FRU4i1rDCEYQvaed0IDq27JXDP9SqlTFIUOqao1lepIsQrQF2%2Bjdrr7u%2FzLuKVdzzc8njvwdfKfkQFA1TMBUCo1eZr%2FWY93zlywsOqBof4YY0Brow%2Bphus

Server-Timing

Other

hcid;desc="019f8df4-7c8c-72e7-860e-d68b699f7f21", cfr;desc="a1f918672de557f3-IAD"

X-Hs-Reason

Other

No portal was specified for this request.

X-Hubspot-Correlation-Id

Other

019f8df4-7c8c-72e7-860e-d68b699f7f21

X-Hubspot-Notfound

Other

true

alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
cf-ray: a1f918672de557f3-IAD
date: Thu, 23 Jul 2026 07:50:37 GMT
nel: {"report_to":"cf-nel","success_fraction":0.01,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=j6HUchs%2BWxm0hDRsxMTiRxsMtG4UgCcGWh%2FRU4i1rDCEYQvaed0IDq27JXDP9SqlTFIUOqao1lepIsQrQF2%2Bjdrr7u%2FzLuKVdzzc8njvwdfKfkQFA1TMBUCo1eZr%2FWY93zlywsOqBof4YY0Brow%2Bphus"}]}
server-timing: hcid;desc="019f8df4-7c8c-72e7-860e-d68b699f7f21", cfr;desc="a1f918672de557f3-IAD"
x-hs-reason: No portal was specified for this request.
x-hubspot-correlation-id: 019f8df4-7c8c-72e7-860e-d68b699f7f21
x-hubspot-notfound: true

Recommendations

Enable compression (gzip/brotli) to improve performance