HTTP Headers Analysis for https://community.infor.com

Detected Technologies from Headers

See all in URL Inspect 14

Instagram

Cloudflare CDN Getty Images

Google Analytics

Google Search

Google Tag Manager

G Workspace

Microsoft 365

OneTrust

ServiceNow

SurveyMonkey

Twitter

Vimeo

YouTube

HTTP Security Headers

Status

Strict-Transport-Security

Weak

max-age=0

Content-Security-Policy

Basic

script-src; object-src; base-uri; +1 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Present

nosniff, nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding, Cookie

connection: close
transfer-encoding: chunked
vary: Accept-Encoding, Cookie

Caching Headers

Age

Caching

42

Cache-Control

Caching

public, max-age=120

Expires

Caching

Wed, 18 Feb 2026 08:02:55 GMT

Last-Modified

Caching

Wed, 18 Feb 2026 08:00:55 GMT

age: 42
cache-control: public, max-age=120
expires: Wed, 18 Feb 2026 08:02:55 GMT
last-modified: Wed, 18 Feb 2026 08:00:55 GMT

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

Access-Control-Expose-Headers

Cors

Authorization, Content-Type, x-app-page-current, x-app-page-first-url, x-app-page-last-url, x-app-page-limit, x-app-page-next-url, x-app-page-prev-url, x-app-page-result-count

access-control-expose-headers: Authorization, Content-Type, x-app-page-current, x-app-page-first-url, x-app-page-last-url, x-app-page-limit, x-app-page-next-url, x-app-page-prev-url, x-app-page-result-count

Cookies Headers

Set-Cookie

Cookies

set-cookie: __cf_bm=Frf6P9PUhQLxOghctgDDR37rg7fRMXcIx5RQYXI4YaM-1771401776-1.0.1.1-tX_WAOFOi9l_iB3JS7FZAxfjlxH5Jah9vRbzSFU8D5oGTs_M_m1cIIGKJA2_GZ5faeATEWqD9zZLFtmSpSprv_q.4mxbojKYdeOwaMgMaSs; path=/; expires=Wed, 18-Feb-26 08:32:56 GMT; domain=.community.infor.com; HttpOnly; Secure; SameSite=None
_cfuvid=0ooFzF0IMmB64Z9jXrEtbStCIKwEKgSFfCeClmkDOJQ-1771401776542-0.0.1.1-604800000; path=/; domain=.community.infor.com; HttpOnly; Secure; SameSite=None

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Cache-Status

Other

HIT

Cf-Ray

Other

9cfc014f4da7f4e3-IAD

Date

Other

Wed, 18 Feb 2026 08:02:56 GMT

P3p

Other

CP="CAO PSA OUR"

Vdk

Other

6994e08a

X-App

Other

0b15cc1903a2d478bd24452e7961739b4adcbe65/cl53112

X-Backend

Other

cl53112

X-Backend-Time

Other

2026-02-18T08:00:55Z

X-Lookup-Mode

Other

normal

X-Permitted-Cross-Domain-Policies

Other

master-only

X-Request-Id

Other

9cfbfe540f96eeb5-YYZ

X-Vanilla-Version

Other

2025.025

alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
cf-ray: 9cfc014f4da7f4e3-IAD
date: Wed, 18 Feb 2026 08:02:56 GMT
p3p: CP="CAO PSA OUR"
vdk: 6994e08a
x-app: 0b15cc1903a2d478bd24452e7961739b4adcbe65/cl53112
x-backend: cl53112
x-backend-time: 2026-02-18T08:00:55Z
x-lookup-mode: normal
x-permitted-cross-domain-policies: master-only
x-request-id: 9cfbfe540f96eeb5-YYZ
x-vanilla-version: 2025.025

Recommendations

Enable compression (gzip/brotli) to improve performance