HTTP Headers Analysis for https://connect.conga.com

Detected Technologies from Headers

See all in URL Inspect 4

AWS

AWS API Gateway

AWS CloudFront

Cloudflare CDN

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

script-src; frame-ancestors; object-src; +1 more Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Present

interest-cohort=()

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Origin, Accept-Encoding

connection: close
transfer-encoding: chunked
vary: Origin, Accept-Encoding

Caching Headers

Cache-Control

Caching

no-cache, no-store, no-transform, must-revalidate, private, no-cache, no-store, max-age=0, must-revalidate

Expires

Caching

Thu, 01 Jan 1970 00:00:00 GMT

cache-control: no-cache, no-store, no-transform, must-revalidate, private, no-cache, no-store, max-age=0, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT

Content Headers

Content-Type

Content

text/html;charset=utf-8

content-type: text/html;charset=utf-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: eventguestside-service-session=node01q4o0mnxwxcj61c8gmwnbb3iu5446185.node0; Path=/; Secure; HttpOnly; SameSite=Lax
event-snapshot-version=tsgf2Pd181bt97tIlyuSHePrwYmOG4oC; Path=/event/d092e9be-76eb-4954-9f64-f36a714aeebf; Secure; HttpOnly; SameSite=strict
__cf_bm=SGra0aUJLQDKjty4iu8C0S7ZKTMjPsYw85qIxZHlU5g-1778305513.5438514-1.0.1.1-9g3s_AUABrKlmjblRXAZVmGX2O0.jRJHuthZ2vkwUnphdCmQGFVDILnZ_VOPKGcBydEc.FB_joBviNxfd8x4S90.Pd1a9wlxdO236u64BGkLkg73IaWFpqwRlUuDqv8_; HttpOnly; Secure; Path=/; Domain=conga.com; Expires=Sat, 09 May 2026 06:15:15 GMT

Other Headers

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

9f8e6593a8b4c978-IAD

Date

Other

Sat, 09 May 2026 05:45:15 GMT

Document-Policy

Other

js-profiling

Feature-Policy

Other

interest-cohort=()

Httplogrequestid

Other

0b41fb85-531f-4225-9f0e-719db8a24eb4, 33788bb4-85e2-4604-ae64-8c51bcf9bdc9

Via

Other

1.1 145bb9cba9e12350510f02ee9ab6ca22.cloudfront.net (CloudFront), 1.1 e20259e84d7d881ed453b1f0e4f9a4c6.cloudfront.net (CloudFront)

X-Amz-Apigw-Id

Other

dFR8kFDEIAMEgrg=

X-Amz-Cf-Id

Other

iBBR-PUl0vIj2hwHIeJTtxdcDR0YyHjzNG5D-HNQg0NPQX_XQCseXA==

X-Amz-Cf-Pop

Other

IAD12-P1, IAD55-P4

X-Amzn-Remapped-Connection

Other

keep-alive

X-Amzn-Remapped-Date

Other

Sat, 09 May 2026 05:45:14 GMT

X-Amzn-Requestid

Other

ec622f77-0b70-4e06-9b75-47e0d5da85f5

X-Cache

Other

Miss from cloudfront

X-Cvent-Version

Other

3.19.51

X-Middleware-Rewrite

Other

/event/d092e9be-76eb-4954-9f64-f36a714aeebf/regProcessStep1?environment=P2

X-Request-Id

Other

0b41fb85-531f-4225-9f0e-719db8a24eb4, 33788bb4-85e2-4604-ae64-8c51bcf9bdc9

cf-cache-status: DYNAMIC
cf-ray: 9f8e6593a8b4c978-IAD
date: Sat, 09 May 2026 05:45:15 GMT
document-policy: js-profiling
feature-policy: interest-cohort=()
httplogrequestid: 0b41fb85-531f-4225-9f0e-719db8a24eb4, 33788bb4-85e2-4604-ae64-8c51bcf9bdc9
via: 1.1 145bb9cba9e12350510f02ee9ab6ca22.cloudfront.net (CloudFront), 1.1 e20259e84d7d881ed453b1f0e4f9a4c6.cloudfront.net (CloudFront)
x-amz-apigw-id: dFR8kFDEIAMEgrg=
x-amz-cf-id: iBBR-PUl0vIj2hwHIeJTtxdcDR0YyHjzNG5D-HNQg0NPQX_XQCseXA==
x-amz-cf-pop: IAD12-P1, IAD55-P4
x-amzn-remapped-connection: keep-alive
x-amzn-remapped-date: Sat, 09 May 2026 05:45:14 GMT
x-amzn-requestid: ec622f77-0b70-4e06-9b75-47e0d5da85f5
x-cache: Miss from cloudfront
x-cvent-version: 3.19.51
x-middleware-rewrite: /event/d092e9be-76eb-4954-9f64-f36a714aeebf/regProcessStep1?environment=P2
x-request-id: 0b41fb85-531f-4225-9f0e-719db8a24eb4, 33788bb4-85e2-4604-ae64-8c51bcf9bdc9

Recommendations

Enable compression (gzip/brotli) to improve performance