Open
Cached
·
just now
24
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=15552000; includeSubDomains; preload
Content-Security-Policy
Basic
default-src; script-src
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
Performance Headers
3 headers
Connection
Performance
close
Transfer-Encoding
Performance
chunked
Vary
Performance
accept-encoding
Caching Headers
1 headers
Cache-Control
Caching
no-cache, private
Content Headers
1 headers
Content-Type
Content
text/html; charset=UTF-8
Server Headers
1 headers
Server
Server
cloudflare
CORS Headers
1 headers
Access-Control-Allow-Origin
Cors
https://www.dochub.com, https://dochub.com
Cookies Headers
1 headers
Set-Cookie
Cookies
__cf_bm=2hoyaVMVnvUX8CSrWwwxaEY3aL0MPNc23hKcl1xwLrc-1770150100-1.0.1.1-sm8L65JCCMwIxn2NStC.woX6frbdBa14Dzql2rq5xlLbvXLthXxchhYHcv3iMCB6isAfiH_Rew0Qwvdk1yZI4lCQmwigd7Vi791vPgW6mVQ; path=/; expires=Tue, 03-Feb-26 20:51:40 GMT; domain=.dochub.com; HttpOnly; Secure; SameSite=None
Other Headers
9 headers
Cf-Cache-Status
Other
DYNAMIC
Cf-Ray
Other
9c84a2d0fe65ea22-IAD
Content-Security-Policy-Report-Only
Other
connect-src 'self' dochub.com *.dochub.com doubleclick.net *.doubleclick.net fonts.googleapis.com *.fonts.googleapis.com google-analytics.com *.google-analytics.com pdffiller.com *.pdffiller.com paypal.com *.paypal.com osano.com *.osano.com sentry.io *.sentry.io www.googleapis.com *.www.googleapis.com uslegalforms.com *.uslegalforms.com translate.googleapis.com *.translate.googleapis.com iconify.design *.iconify.design microsoft.com *.microsoft.com braintree-api.com *.braintree-api.com braintreegateway.com *.braintreegateway.com cloudflare.com *.cloudflare.com datacloudstat.com *.datacloudstat.com google.com *.google.com dropboxapi.com *.dropboxapi.com bing.com *.bing.com doublestat.info *.doublestat.info fbanalytics.org *.fbanalytics.org usrsprt.com *.usrsprt.com wss://www.pdffiller.com google.co www.google.co noembed.com *.noembed.com hotjar.io *.hotjar.io hotjar.com *.hotjar.com www.google.co.in www.google.co.za www.google.com.ph www.google.com.ng www.google.com.uk; script-src 'self' bing.com bat.bing.com googletagmanager.com *.googletagmanager.com cdn.mrkhub.com *.cdn.mrkhub.com google-analytics.com *.google-analytics.com https://static.zdassets.com/ekr/snippet.js js.stripe.com *.js.stripe.com cdn.skypack.dev *.cdn.skypack.dev https://www.recaptcha.net/recaptcha/api.js pdffiller.com *.pdffiller.com paypalobjects.com *.paypalobjects.com paypal.com *.paypal.com pagespeed-mod.com *.pagespeed-mod.com osano.com *.osano.com mr-prod.xyz *.mr-prod.xyz mr-dev.xyz *.mr-dev.xyz maps.googleapis.com *.maps.googleapis.com live.net *.live.net cdn.socialhead.io *.cdn.socialhead.io hotjar.com *.hotjar.com gstatic.com *.gstatic.com googlesyndication.com *.googlesyndication.com googleadservices.com *.googleadservices.com google.com *.google.com facebook.net *.facebook.net dropbox.com *.dropbox.com dochub.com *.dochub.com cloudflareinsights.com *.cloudflareinsights.com cloudflare.com *.cloudflare.com browser-update.org *.browser-update.org 'unsafe-inline' 'unsafe-eval' https://www.google.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=Qbt62AnpaqicFmLQQ0hNRLkEvtxoX6h7nTm5c1dreFY-1770150100-1.0.1.1-vFRnzt0xrF2pKHyrUiOm5IxQSXPnvO1Q3qSJ2H1Q3z5u1J7ed8vDSYxkgPO2XWGHAv0nRW80RYwTOm_htQuSUtCdC5gED5A.S5rtQi9HAZvQu7GlR9pR.tM.KXg4VuhajBtLqG4RlSqVA.IBfz05AsjeGq9KMvj0aikbEmFUwjh793g_6WWgpx61G42_oAsOTKqz89DmEmC2T6W5YFLunQ; report-to cf-otvkdzpbisokmtcm
Date
Other
Tue, 03 Feb 2026 20:21:40 GMT
Dh-Test
Other
true
Report-To
Other
{"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=Qbt62AnpaqicFmLQQ0hNRLkEvtxoX6h7nTm5c1dreFY-1770150100-1.0.1.1-vFRnzt0xrF2pKHyrUiOm5IxQSXPnvO1Q3qSJ2H1Q3z5u1J7ed8vDSYxkgPO2XWGHAv0nRW80RYwTOm_htQuSUtCdC5gED5A.S5rtQi9HAZvQu7GlR9pR.tM.KXg4VuhajBtLqG4RlSqVA.IBfz05AsjeGq9KMvj0aikbEmFUwjh793g_6WWgpx61G42_oAsOTKqz89DmEmC2T6W5YFLunQ"}],"group":"cf-otvkdzpbisokmtcm","max_age":86400}
Server-Timing
Other
bootstrap;desc="Bootstrap";dur=7.8740119934082, app;desc="App";dur=131, total;desc="Total";dur=139.24884796143,
X-Envoy-Upstream-Service-Time
Other
142
X-Mp-Type
Other
Main
Recommendations
Enable compression (gzip/brotli) to improve performance