HTTP Headers Analysis for https://doubleverify.com

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Weak

upgrade-insecure-requests

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Missing

Not configured

Recommendations

• Significantly strengthen CSP directives
• Consider adding Permissions-Policy to control browser features

Performance Headers

2 headers

Connection

Performance

keep-alive

Transfer-Encoding

Performance

chunked

Caching Headers

2 headers

Cache-Control

Caching

s-maxage=36000, max-age=5

Last-Modified

Caching

Tue, 11 Nov 2025 00:24:29 GMT

Content Headers

1 headers

Content-Type

Content

text/html; charset=UTF-8

Server Headers

1 headers

Server

cloudflare

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

Cookies

_cfuvid=Om9odmY3blzRVKtQaZ3EYMvRZF6w2mA.xUp1ZW.dljA-1762836852306-0.0.1.1-604800000; path=/; domain=.doubleverify.com; HttpOnly; Secure; SameSite=None

Other Headers

16 headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Ray

Other

99cb30b6b8bac9af-IAD

Content-Security-Policy-Report-Only

Other

default-src 'self'; script-src 'self' hubapi.com *.hubapi.com hubspot.com *.hubspot.com app.hubspot.com hubspotusercontent-na1.net *.hubspotusercontent-na1.net hsappstatic.net *.hsappstatic.net hs-banner.com *.hs-banner.com hsforms.com *.hsforms.com forms.hsforms.com *googletagmanager.com https://munchkin.marketo.net https://snap.licdn.com *linkedin.com; 'unsafe-inline' https://trusted-cdn.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' forms.hscollectedforms.net *.hscollectedforms.net hubspot.com *.hubspot.com hubapi.com *.hubapi.com hsforms.com *.hsforms.com hsforms.net *.hsforms.net hsappstatic.net *.hsappstatic.net googletagmanager.com *.googletagmanager.com google-analytics.com *.google-analytics.com cdn.cookielaw.org *.cookielaw.org www.google.com analytics.google.com px.ads.linkedin.com *.linkedin.com; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; upgrade-insecure-requests

Date

Other

Tue, 11 Nov 2025 04:54:12 GMT

Edge-Cache-Tag

Other

CT-190418893385,CT-194560863900,CT-194561185291,CT-194562944892,CG-46126064,P-46126064,W-185559909674,W-185560476835,CW-185469505431,CW-185469505432,CW-185469505435,CW-185471142269,CW-185471142279,CW-185471142282,CW-185471243957,CW-185471244037,CW-185471244041,CW-185758392110,CW-193656361298,DB-107517791,DB-107699119,DB-108207524,DB-108207526,DB-130102195,DB-131525457,DB-131555996,E-185469505447,E-185471142289,E-185471142306,E-185471142319,E-185471244043,E-185471244046,E-185803946093,MENU-185461820003,MENU-185462290261,MENU-185462290283,MENU-185559909674,MENU-185560476835,PGS-ALL,SW-1,B-181340521267,GC-185508631112,TS-185471291157

Link

Other

<https://doubleverify.com/hubfs/hub_generated/template_assets/1/185471244043/1762451157371/template_fwds_styles--mobile.min.css>; rel=preload; as=style,<https://doubleverify.com/hubfs/hub_generated/template_assets/1/185469505447/1762451157363/template_fwds_styles--desktop.min.css>; rel=preload; as=style,<https://doubleverify.com/hubfs/hub_generated/template_assets/1/185471142289/1762451157365/template_fwds_main.min.js>; rel=preload; as=script,</hs/hsstatic/cos-LanguageSwitcher/static-1.336/sass/LanguageSwitcher.css>; rel=preload; as=style

Nel

Other

{"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}

Report-To

Other

{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g8fQjiSoEJavfzmwNfkvG%2FcV9No4EUOyQL1RbMqTIwiSID3R6P%2BF27BKa7DtlWnbIPZGs0IpLW3HiCL9%2BVSFfKtybHod7qz3JIuNcf9sVKqwlByNW6zbeNxSb2piPyVQT%2Bk%3D"}],"group":"cf-nel","max_age":604800}

X-Hs-Cache-Config

Other

BrowserCache-5s-EdgeCache-180s

X-Hs-Cache-Control

Other

s-maxage=36000, max-age=0

X-Hs-Cf-Cache-Status

Other

HIT

X-Hs-Cfworker-Meta

Other

{"contentType":"SITE_PAGE","resolver":"PreRenderedContentResolver"}