HTTP Headers Analysis for https://app.tilled.com

Detected Technologies from Headers

See all in URL Inspect 3

AWS CloudFront

Amazon S3

Cloudflare CDN

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=2592000; includeSubDomains

Content-Security-Policy

Weak

upgrade-insecure-requests Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

geolocation=(), microphone=()

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

accept-encoding

connection: close
transfer-encoding: chunked
vary: accept-encoding

Caching Headers

Age

Caching

74095

Last-Modified

Caching

Thu, 26 Mar 2026 18:31:00 GMT

age: 74095
last-modified: Thu, 26 Mar 2026 18:31:00 GMT

Content Headers

Content-Type

Content

text/html

content-type: text/html

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _cfuvid=YIiBiqvmZoIKUB3tfAGPj0.GjC4ABFSeAXtwbcH0uWM-1774710575.856634-1.0.1.1-xcQJETjuQEg28_pQQZ2chUJEHJPDY4JQiV6IDLpO218; HttpOnly; SameSite=None; Secure; Path=/; Domain=tilled.com

Other Headers

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

9e378e8b19f3da36-IAD

Date

Other

Sat, 28 Mar 2026 15:09:35 GMT

Via

Other

1.1 eeea929831a24a4960e38874e63fe5c6.cloudfront.net (CloudFront)

X-Amz-Cf-Id

Other

kLPqo0A4hYckc8Y-H9RtLn3O_MYgsnc3Db7i67ZMODWVuLgh3rQ67A==

X-Amz-Cf-Pop

Other

IAD61-P13

X-Amz-Server-Side-Encryption

Other

AES256

X-Cache

Other

Hit from cloudfront

cf-cache-status: DYNAMIC
cf-ray: 9e378e8b19f3da36-IAD
date: Sat, 28 Mar 2026 15:09:35 GMT
via: 1.1 eeea929831a24a4960e38874e63fe5c6.cloudfront.net (CloudFront)
x-amz-cf-id: kLPqo0A4hYckc8Y-H9RtLn3O_MYgsnc3Db7i67ZMODWVuLgh3rQ67A==
x-amz-cf-pop: IAD61-P13
x-amz-server-side-encryption: AES256
x-cache: Hit from cloudfront

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching