HTTP Headers Analysis for https://community.dataiku.com

Detected Technologies from Headers

See all in URL Inspect 5

Instagram

Cloudflare CDN

Getty Images

Google Search

Twitter

HTTP Security Headers

Status

Strict-Transport-Security

Weak

max-age=0; includeSubDomains

Content-Security-Policy

Basic

script-src; object-src; base-uri; +1 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Present

nosniff, nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding, Cookie

connection: close
transfer-encoding: chunked
vary: Accept-Encoding, Cookie

Caching Headers

Cache-Control

Caching

public, max-age=120

Expires

Caching

Fri, 08 May 2026 03:48:25 GMT

Last-Modified

Caching

Fri, 08 May 2026 03:46:25 GMT

cache-control: public, max-age=120
expires: Fri, 08 May 2026 03:48:25 GMT
last-modified: Fri, 08 May 2026 03:46:25 GMT

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

Access-Control-Expose-Headers

Cors

Authorization, Content-Type, x-app-page-current, x-app-page-first-url, x-app-page-last-url, x-app-page-limit, x-app-page-next-url, x-app-page-prev-url, x-app-page-result-count

access-control-expose-headers: Authorization, Content-Type, x-app-page-current, x-app-page-first-url, x-app-page-last-url, x-app-page-limit, x-app-page-next-url, x-app-page-prev-url, x-app-page-result-count

Cookies Headers

Set-Cookie

Cookies

set-cookie: __cf_bm=O05HZOGjups961x68yQlS4OViDw8KKd1d_XjEyguSBU-1778211985.3867238-1.0.1.1-3yVJrSgtvisXMMJBKacyMfzHIpMY3mJd_G4IvFSrhZQRfb6f.dkJBhnlbdpwa_1ktMkGXWBfdMKkFkv6icKiPwMvdFW73aAjQ0jNMlT2utU4bR4.JfRc_eJZVYmcnRfg; HttpOnly; Secure; Path=/; Domain=community.dataiku.com; Expires=Fri, 08 May 2026 04:16:25 GMT
_cfuvid=nLvW7bKpQ8G0eK0AOfC0QLEOk3aGWcA0ItauVMwdUqE-1778211985.3867238-1.0.1.1-XbAppV0YuJEEV.pyTKSkkQdNJNvAFzabETU1KmpHRkU; HttpOnly; SameSite=None; Secure; Path=/; Domain=community.dataiku.com

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Cache-Status

Other

EXPIRED

Cf-Ray

Other

9f857a2ca95606e1-IAD

Date

Other

Fri, 08 May 2026 03:46:25 GMT

P3p

Other

CP="CAO PSA OUR"

Vdk

Other

69fd0004

X-App

Other

a3203633c3c0dcd8c7b40d6bd79fdf27f0205ce6/cl53133

X-Backend

Other

cl53133

X-Backend-Time

Other

2026-05-08T03:46:25Z

X-Lookup-Mode

Other

normal

X-Permitted-Cross-Domain-Policies

Other

master-only

X-Request-Id

Other

9f857a2ca95606e1-YYZ

X-Vanilla-Version

Other

2026.006

alt-svc: h3=":443"; ma=86400
cf-cache-status: EXPIRED
cf-ray: 9f857a2ca95606e1-IAD
date: Fri, 08 May 2026 03:46:25 GMT
p3p: CP="CAO PSA OUR"
vdk: 69fd0004
x-app: a3203633c3c0dcd8c7b40d6bd79fdf27f0205ce6/cl53133
x-backend: cl53133
x-backend-time: 2026-05-08T03:46:25Z
x-lookup-mode: normal
x-permitted-cross-domain-policies: master-only
x-request-id: 9f857a2ca95606e1-YYZ
x-vanilla-version: 2026.006

Recommendations

Enable compression (gzip/brotli) to improve performance