HTTP Headers Analysis for https://datacandy.com

Open Cached · just now

26 Headers

Detected Technologies from Headers

See all in URL Inspect 5

Cloudflare NEL Monitoring

Cloudflare CDN

Cloudflare CDNJS

Font Awesome

jQuery

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Weak

upgrade-insecure-requests Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

Transfer-Encoding

Performance

chunked

Vary

Performance

accept-encoding

connection: close
transfer-encoding: chunked
vary: accept-encoding

Caching Headers

Cache-Control

Caching

s-maxage=36000, max-age=5

Last-Modified

Caching

Thu, 07 May 2026 05:53:04 GMT

cache-control: s-maxage=36000, max-age=5
last-modified: Thu, 07 May 2026 05:53:04 GMT

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

set-cookie: __cf_bm=cQmIZ5WQUIZQDFR00Zb6yhrN0Jm2WnLvnoC5DFK2vcI-1778378452.0347126-1.0.1.1-GHPWO2tYEfKVPo1h1_66uN4.1mwX5vUsbuIpHYSCACnzsCGPUlQXVHJCXoTuQawVVogcdg80BU.yw6QhO6LLdjSbBle3oa6gH_58dD3umjApjGUH2BO057P4xXEsTnGY; HttpOnly; Secure; Path=/; Domain=datacandy.com; Expires=Sun, 10 May 2026 02:30:52 GMT
_cfuvid=jJVAMM86upU8r7.gV1qQ0EYnpSDMH3p9pJyFyrMFkJ4-1778378452.0347126-1.0.1.1-K0Yn10eFmrpVVDY0ei8jX.idH6Z0n2qK0Ug9JNp3ars; HttpOnly; SameSite=None; Secure; Path=/; Domain=datacandy.com

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Ray

Other

9f955a4d3cfdc599-IAD

Date

Other

Sun, 10 May 2026 02:00:52 GMT

Edge-Cache-Tag

Other

CT-208331738975,CT-210767689278,P-456819,CW-208178243426,CW-208178243431,CW-208178470921,CW-208178470944,CW-208178470946,CW-208178470948,CW-208178574933,CW-208178574935,CW-208178574939,CW-208178574941,CW-208178574943,CW-208178574945,CW-208178574949,CW-208178574951,CW-208178574953,CW-208178574961,E-208178243597,E-208178470742,E-208178470743,E-208178470753,E-208178470917,E-208178574897,E-208178574903,E-208178575134,E-208178575135,E-208178575142,RA-208183026811,RA-208183027026,RA-208183027029,RA-208183027032,RA-208183027035,PGS-ALL,SW-1,GC-209999280417,GC-209999827363,GC-210790533455,GC-210790533457,TS-208178243383

Link

Other

URL

https://datacandy.com/hubfs/raw_assets/public/datacandy-com/assets/fonts/inter/Inter-Regular.woff2

rel=preload as=font

URL

https://datacandy.com/hubfs/raw_assets/public/datacandy-com/assets/fonts/inter/Inter-Medium.woff2

rel=preload as=font

URL

https://datacandy.com/hubfs/raw_assets/public/datacandy-com/assets/fonts/bogart/Bogart-Semibold.woff2

rel=preload as=font

URL

https://datacandy.com/hubfs/raw_assets/public/datacandy-com/assets/fonts/inter/Inter-Bold.woff2

rel=preload as=font

Nel

Other

Report-To Group cf-nel max-age: 1w

success: 1.0%

Report-To

Other

Group cf-nel max-age: 1w

Endpoint 1 https://a.nel.cloudflare.com/report/v4?s=1TXwM%2F2Me%2Ftv0ToBaYu9lR8A9CW3urOuLTJQk0Uj6B0qvDp8tUhIwcH8w4X8S0%2BqZHEDStGwwQAVbBbXt5lhGW3ffqjoXVCn840flTkeh1l0ZTLpTNlIVZt8%2B%2FeCKdc%3D

X-Hs-Cache-Config

Other

BrowserCache-5s-EdgeCache-180s

X-Hs-Cache-Control

Other

s-maxage=36000, max-age=0

X-Hs-Cf-Cache-Status

Other

HIT

X-Hs-Cfworker-Meta

Other

{"contentType":"SITE_PAGE","resolver":"PreRenderedContentResolver"}

X-Hs-Content-Id

Other

208331738975

X-Hs-Hub-Id

Other

456819

X-Hs-Portal-Id

Other

456819

X-Hs-Prerendered

Other

Thu, 07 May 2026 05:53:04 GMT

alt-svc: h3=":443"; ma=86400
cf-ray: 9f955a4d3cfdc599-IAD
date: Sun, 10 May 2026 02:00:52 GMT
edge-cache-tag: CT-208331738975,CT-210767689278,P-456819,CW-208178243426,CW-208178243431,CW-208178470921,CW-208178470944,CW-208178470946,CW-208178470948,CW-208178574933,CW-208178574935,CW-208178574939,CW-208178574941,CW-208178574943,CW-208178574945,CW-208178574949,CW-208178574951,CW-208178574953,CW-208178574961,E-208178243597,E-208178470742,E-208178470743,E-208178470753,E-208178470917,E-208178574897,E-208178574903,E-208178575134,E-208178575135,E-208178575142,RA-208183026811,RA-208183027026,RA-208183027029,RA-208183027032,RA-208183027035,PGS-ALL,SW-1,GC-209999280417,GC-209999827363,GC-210790533455,GC-210790533457,TS-208178243383
link: <https://datacandy.com/hubfs/raw_assets/public/datacandy-com/assets/fonts/inter/Inter-Regular.woff2>; rel=preload; as=font,<https://datacandy.com/hubfs/raw_assets/public/datacandy-com/assets/fonts/inter/Inter-Medium.woff2>; rel=preload; as=font,<https://datacandy.com/hubfs/raw_assets/public/datacandy-com/assets/fonts/bogart/Bogart-Semibold.woff2>; rel=preload; as=font,<https://datacandy.com/hubfs/raw_assets/public/datacandy-com/assets/fonts/inter/Inter-Bold.woff2>; rel=preload; as=font,<https://datacandy.com/hubfs/raw_assets/public/datacandy-com/assets/fonts/inter/Inter-SemiBold.woff2>; rel=preload; as=font,<https://kit.fontawesome.com/78b4a9ba68.js>; rel=preload; as=script,<https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css>; rel=preload; as=style,</hs/hsstatic/jquery-libs/static-1.4/jquery/jquery-1.11.2.js>; rel=preload; as=script,<https://datacandy.com/hubfs/hub_generated/template_assets/1/208178470917/1776807800216/template_main.min.css>; rel=preload; as=style
nel: {"report_to":"cf-nel","success_fraction":0.01,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1TXwM%2F2Me%2Ftv0ToBaYu9lR8A9CW3urOuLTJQk0Uj6B0qvDp8tUhIwcH8w4X8S0%2BqZHEDStGwwQAVbBbXt5lhGW3ffqjoXVCn840flTkeh1l0ZTLpTNlIVZt8%2B%2FeCKdc%3D"}]}
x-hs-cache-config: BrowserCache-5s-EdgeCache-180s
x-hs-cache-control: s-maxage=36000, max-age=0
x-hs-cf-cache-status: HIT
x-hs-cfworker-meta: {"contentType":"SITE_PAGE","resolver":"PreRenderedContentResolver"}
x-hs-content-id: 208331738975
x-hs-hub-id: 456819
x-hs-portal-id: 456819
x-hs-prerendered: Thu, 07 May 2026 05:53:04 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance