HTTP Headers Analysis for https://help.close.com

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

accelerometer=(), ambient-light-sensor=(), autoplay=(*), camera=(*), clipboard-write=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(*), midi=(), payment=(), usb=(), fullscreen=(*)

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Content-Type-Options: nosniff

Performance Headers

3 headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

Caching Headers

2 headers

Cache-Control

Caching

public, max-age=0, stale-while-revalidate=300, stale-if-error=60

Etag

Caching

W/"471e6-JHV0uQ9NuS/NGrqm9UeHyp7GVzA"

Content Headers

1 headers

Content-Type

Content

text/html; charset=utf-8

Server Headers

1 headers

Server

cloudflare

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

Cookies

__cf_bm=gwxdFAnxqtEVveND8w8aqNMTtBjpnGRYdI9_nWFEZ5M-1768497222.7879446-1.0.1.1-AE3cxcmxEFn7IpCROWICsh.6z9cg6qzjUXOfNZC.sRR6LwrfKxTebqpgcOeLKlqIy_ibk.8bHGUv6ry_pnFHr5ZUnzkWXvPFMZJTxb0oowkb3l5O4G7VC1bYtFu_jmP0; HttpOnly; Secure; Path=/; Domain=document360.io; Expires=Thu, 15 Jan 2026 17:43:43 GMT