HTTP Headers Analysis for https://gov1.sr.qualtrics.com

Detected Technologies from Headers

See all in URL Inspect 1

AzureFrontDoor

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Weak

frame-ancestors; report-uri Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

camera=(), geolocation=(), microphone=()

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

accept-ranges: bytes
connection: close

Caching Headers

Cache-Control

Caching

no-cache, no-store, must-revalidate

Expires

Caching

0

Pragma

Caching

no-cache

cache-control: no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache

Content Headers

Content-Length

Content

37797

Content-Type

Content

text/html;charset=utf-8

content-length: 37797
content-type: text/html;charset=utf-8

Server Headers

No server headers found

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Wed, 02 Sep 2026 18:32:14 GMT

Dc

Other

gov1

Host

Other

8

X-Azure-Ref

Other

20260902T183214Z-17d8f65779cgg4vhhS1PHXwtxc0000002290000000005rqq

X-Cache

Other

CONFIG_NOCACHE

X-Request-Id

Other

4b617727-7ccf-414d-8a6e-f7c607ec1eaa

X-Transaction-Id

Other

c7e444b8-3950-4f0a-8e67-472f1fa9217a

date: Wed, 02 Sep 2026 18:32:14 GMT
dc: gov1
host: 8
x-azure-ref: 20260902T183214Z-17d8f65779cgg4vhhS1PHXwtxc0000002290000000005rqq
x-cache: CONFIG_NOCACHE
x-request-id: 4b617727-7ccf-414d-8a6e-f7c607ec1eaa
x-transaction-id: c7e444b8-3950-4f0a-8e67-472f1fa9217a

Recommendations

Enable compression (gzip/brotli) to improve performance