HTTP Headers Analysis for https://app.buzzmonitor.com.br

Detected Technologies from Headers

See all in URL Inspect 1

Cloudflare CDN

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Origin

connection: close
transfer-encoding: chunked
vary: Origin

Caching Headers

Cache-Control

Caching

max-age=0, private, must-revalidate

cache-control: max-age=0, private, must-revalidate

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

X-Runtime

Server

0.010528

server: cloudflare
x-runtime: 0.010528

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _buzz_monitor3_session=y81aVUWVPIYI%2B2Ura3H3bzKy0waoKoYV0%2FWZOWeORVFlyYJPI21Xwj3yb11%2Fhon1vqWrWcb5j7zRGv8W%2BHRMsbpPRz4nMnGQuKnexpIZuYvDvr1RT5N02CM4Q8Uv6kXUNuZmpl%2FxiU801ymdIPtNKqCuOucZBLYMnJXKDgCtA5Zv87FdFLPlAGR%2B9tR94B1b2QVaX%2FtLFqhHTMcEgbH8%2B9Z827owu776wXBqIu78BEDyg7tP%2FvykVpXn02DoWdMYt%2BmB4o8IFO8ySYz%2BS2ApTreXYHFPnsHg2xqA6dUKtDh2%2FamjjlCt%2FlOCJ8%2FiXQLKKPgZSIdykFKyXugw6Y%2FBBNu5dtW36Dun8GqFxYh3W9DMOWEJs2xKXHKEJsjNyKRCuhrpMzOGCK8hnXxZX5AKudPf3WBQlntY8H%2BmdyYPoZ7b7VYcbXsGm9B5qx9E%2BzEyirXPUjI%2BGCWxJwxm36vfUfcMndssOwYcCyhLNYNXMFKN%2FZDfu69CAYXZJqdCIkfgHwtWyOv3bmug8RLeNNVZYJyEIEP0isKGuEpbU1ck%2BN08TaJgmzAOY1RbO24hztaHveVHEsM4m1EOMnr90m%2FIZN2DprqbiBtKNIj3ZuJ6HuPZazgXUgm4kJdWM1NYLc%2BGxwKWdqIy--IO7Jkh637f9LX6o5--%2FsExryN2ETndKSd1gc3HdA%3D%3D; path=/; HttpOnly; secure

Other Headers

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

9f8f70125d85d690-IAD

Date

Other

Sat, 09 May 2026 08:47:09 GMT

X-Download-Options

Other

noopen

X-Permitted-Cross-Domain-Policies

Other

none

X-Request-Id

Other

45206958-d389-4ed2-8efd-ed1b7d79b385

cf-cache-status: DYNAMIC
cf-ray: 9f8f70125d85d690-IAD
date: Sat, 09 May 2026 08:47:09 GMT
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-request-id: 45206958-d389-4ed2-8efd-ed1b7d79b385

Recommendations

Enable compression (gzip/brotli) to improve performance