HTTP Headers Analysis for https://formapi.mailercloud.com

Detected Technologies from Headers

See all in URL Inspect 8

Cloudflare NEL Monitoring Active incidents

AMP

Cloudflare Active incidents

Cloudflare CDN Active incidents

Cloudflare Turnstile Active incidents

Cloudflare Web Analytics Active incidents

Google Fonts

Google Hosted Libraries

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=15552000; includeSubDomains; preload

Content-Security-Policy

Good

default-src; img-src; style-src; +7 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

same-origin

Permissions-Policy

Present

geolocation=(), microphone=(), camera=()

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Strengthen CSP by removing 'unsafe-eval'

Performance Headers

Connection

Performance

close

Vary

Performance

accept-encoding

connection: close
vary: accept-encoding

Caching Headers

Cache-Control

Caching

no-store, no-cache, must-revalidate, max-age=0

Expires

Caching

0

Pragma

Caching

no-cache

cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: 0
pragma: no-cache

Content Headers

Content-Length

Content

41

Content-Type

Content

application/json

content-length: 41
content-type: application/json

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

Access-Control-Allow-Headers

Cors

Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization

Access-Control-Allow-Methods

Cors

POST, OPTIONS

Access-Control-Allow-Origin

Cors

*

Access-Control-Max-Age

Cors

10000

access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 10000

Cookies Headers

No cookies headers found

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Apo-Via

Other

origin,host

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

9f9f247e68611329-IAD

Date

Other

Mon, 11 May 2026 06:31:45 GMT

Nel

Other

Report-To Group cf-nel max-age: 1w

success: 0.0%

Report-To

Other

Group cf-nel max-age: 1w

Endpoint 1 https://a.nel.cloudflare.com/report/v4?s=BrjuCf0HK5ZhcDV1YgPOgAzIsM4Bk6aijTFu32OHnIM3BXIrM1oQxS7OtwFD26WpzWvQkXhfTniN4%2Bz04gwZMk9ZsPXj7HyzC5Uc5%2FS6m%2F38ZfJe%2B6e0Qx5ig%2F4K96gb%2F7X4OMafBTBB

Server-Timing

Other

cfCacheStatus;desc="DYNAMIC", cfEdge;dur=274,cfOrigin;dur=0

Speculation-Rules

Other

"/cdn-cgi/speculation"

alt-svc: h3=":443"; ma=86400
cf-apo-via: origin,host
cf-cache-status: DYNAMIC
cf-ray: 9f9f247e68611329-IAD
date: Mon, 11 May 2026 06:31:45 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=BrjuCf0HK5ZhcDV1YgPOgAzIsM4Bk6aijTFu32OHnIM3BXIrM1oQxS7OtwFD26WpzWvQkXhfTniN4%2Bz04gwZMk9ZsPXj7HyzC5Uc5%2FS6m%2F38ZfJe%2B6e0Qx5ig%2F4K96gb%2F7X4OMafBTBB"}]}
server-timing: cfCacheStatus;desc="DYNAMIC", cfEdge;dur=274,cfOrigin;dur=0
speculation-rules: "/cdn-cgi/speculation"

Recommendations

Enable compression (gzip/brotli) to improve performance