HTTP Headers Analysis for https://demo.etr.org

Detected Technologies from Headers

See all in URL Inspect 31

AWS CloudFront

Gravatar

ADP

AppNexus (Xandr)

AWS Active incidents

Amazon S3

Cloudflare Active incidents

Cloudflare CDN

Cloudflare CDNJS

Formstack

Google AdSense

Google Analytics

Google API JS Client

Google Conversion Tracking

Google DoubleClick

Google Static File Front End

Google Tag Manager

HubSpot

HubSpot Analytics

HubSpot CMS

HubSpot Feedback & Surveys

HubSpot Forms

HubSpot Live Chat

HubSpot Video

jsDelivr

Microsoft 365

Nginx

Vimeo

YouTube

Google Cloud

Google Cloud Storage

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000; includeSubdomains; preload

Content-Security-Policy

Basic

default-src; upgrade-insecure-requests; base-uri; +9 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

geolocation=(), camera=self, microphone=self

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Improve CSP by adding more specific directives and removing 'unsafe-inline'

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

No caching headers found

Content Headers

Content-Language

Content

en-US

Content-Length

Content

29997

Content-Type

Content

text/html;charset=UTF-8

content-language: en-US
content-length: 29997
content-type: text/html;charset=UTF-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: cfid=9bd076aa-9f02-4c3b-939f-facb545e6b03; Path=/;Expires=Fri, 19-May-2056 16:22:04 GMT;Secure;HttpOnly;SameSite=None
cftoken=0; Path=/;Expires=Fri, 19-May-2056 16:22:04 GMT;Secure;HttpOnly;SameSite=None
MXP_TRACKINGID=E7336EFF-9498-460E-831A2ADB0E865953; Path=/;Expires=Fri, 19-May-2056 16:22:04 GMT;Secure;HttpOnly
mobileFormat=false; Path=/;Expires=Fri, 19-May-2056 16:22:04 GMT;Secure;HttpOnly

Other Headers

Date

Other

Thu, 21 May 2026 08:30:34 GMT

Generator

Other

Masa CMS 7.5.4

Via

Other

1.1 adbd5a952eb287ac84e05fd5fd42328e.cloudfront.net (CloudFront)

X-Amz-Cf-Id

Other

uLi9DHbCs4HWrV7k0EIn_DwFit7r6sxN7o3hWvgOnQDKWqCK-y3RRg==

X-Amz-Cf-Pop

Other

IAD61-P10

X-Cache

Other

Miss from cloudfront

date: Thu, 21 May 2026 08:30:34 GMT
generator: Masa CMS 7.5.4
via: 1.1 adbd5a952eb287ac84e05fd5fd42328e.cloudfront.net (CloudFront)
x-amz-cf-id: uLi9DHbCs4HWrV7k0EIn_DwFit7r6sxN7o3hWvgOnQDKWqCK-y3RRg==
x-amz-cf-pop: IAD61-P10
x-cache: Miss from cloudfront

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching