HTTP Headers Analysis for https://lending.figured.com

Open Cached · just now

27 Headers

Detected Technologies from Headers

See all in URL Inspect 4

Cloudflare NEL Monitoring

Cloudflare CDN

HubSpot

jQuery

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=31536000

Content-Security-Policy

Weak

upgrade-insecure-requests Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Good

no-referrer-when-downgrade

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Significantly strengthen CSP directives
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

Transfer-Encoding

Performance

chunked

Vary

Performance

accept-encoding

connection: close
transfer-encoding: chunked
vary: accept-encoding

Caching Headers

Cache-Control

Caching

s-maxage=36000, max-age=5

Last-Modified

Caching

Thu, 07 May 2026 03:40:23 GMT

cache-control: s-maxage=36000, max-age=5
last-modified: Thu, 07 May 2026 03:40:23 GMT

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

set-cookie: __cf_bm=f86Ngxt3CYkZM.261UNC3ElB_hZaXdPSMXJkHUjfDt4-1778316430.1971338-1.0.1.1-gHo6cc.QU49cLn8XChBfkmFxkBOvD59qvnfcKNPDPzsAQBdvVvgBfq_YNE0QzEOeLkMotwgB7G9IYooF2udSkjLgYo0ZjlkYiJpG0pcbIA2eai5znLHZsmtNc0S.nHiW; HttpOnly; Secure; Path=/; Domain=lending.figured.com; Expires=Sat, 09 May 2026 09:17:10 GMT
_cfuvid=Ek4kpVFbeIrS2uKczK3fFw1xgb_0NnYLIKf6fVgTFbA-1778316430.1971338-1.0.1.1-brkqUbzMiR.WrFgGuXJ.u4GmfkSLTdqM65m7nA5I5qc; HttpOnly; SameSite=None; Secure; Path=/; Domain=lending.figured.com

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Ray

Other

9f8f7018bd61083a-IAD

Date

Other

Sat, 09 May 2026 08:47:10 GMT

Edge-Cache-Tag

Other

CT-114967653176,P-6511526,L-136541488419,L-137562741100,L-137736541996,L-137756898366,L-92099612802,L-92104207652,W-139242577822,W-92099612467,W-92104022857,CW-136545697437,CW-53681143576,CW-92107133016,CW-92860117074,E-19714741933,E-19714741934,E-91688255051,MENU-139242577822,MENU-92099612467,MENU-92104022857,PGS-ALL,SW-2,GC-137736541979,GC-191739758164,GC-92734552628,GC-92754819757

Link

Other

URL

/hs/hsstatic/jquery-libs/static-1.4/jquery/jquery-1.11.2.js

rel=preload as=script

URL

https://lending.figured.com/hubfs/hub_generated/module_assets/1/92107133016/1743546996413/module_Lending-Banner.min.css

rel=preload as=style

URL

https://lending.figured.com/hubfs/hub_generated/module_assets/1/136545697437/1743547010363/module_Finance_Products_Sep23.min.css

rel=preload as=style

URL

https://lending.figured.com/hubfs/hub_generated/module_assets/1/53681143576/1743546964815/module_Social_Icons.min.css

rel=preload as=style

Nel

Other

Report-To Group cf-nel max-age: 1w

success: 1.0%

Report-To

Other

Group cf-nel max-age: 1w

Endpoint 1 https://a.nel.cloudflare.com/report/v4?s=3oDPMFllq7moa4d%2BF0ccygV0T6u8Zi7JPq0BE4%2BEv5zXyylOocck%2Fd2D59%2BsixpZdb0REe0Iliox%2Fi5QrHHcOahljXRht%2BzennzKYSLO0IAxXVbg7AiK7VIEG9hBuhOXtUTmbFc%3D

X-Hs-Cache-Config

Other

BrowserCache-5s-EdgeCache-5s

X-Hs-Cache-Control

Other

s-maxage=36000, max-age=0

X-Hs-Cf-Cache-Status

Other

HIT

X-Hs-Cfworker-Meta

Other

{"contentType":"SITE_PAGE","resolver":"PreRenderedContentResolver"}

X-Hs-Content-Campaign-Id

Other

2080e5fb-710a-4295-8b0d-352a335b136f

X-Hs-Content-Id

Other

114967653176

X-Hs-Hub-Id

Other

6511526

X-Hs-Portal-Id

Other

6511526

X-Hs-Prerendered

Other

Thu, 07 May 2026 03:40:23 GMT

alt-svc: h3=":443"; ma=86400
cf-ray: 9f8f7018bd61083a-IAD
date: Sat, 09 May 2026 08:47:10 GMT
edge-cache-tag: CT-114967653176,P-6511526,L-136541488419,L-137562741100,L-137736541996,L-137756898366,L-92099612802,L-92104207652,W-139242577822,W-92099612467,W-92104022857,CW-136545697437,CW-53681143576,CW-92107133016,CW-92860117074,E-19714741933,E-19714741934,E-91688255051,MENU-139242577822,MENU-92099612467,MENU-92104022857,PGS-ALL,SW-2,GC-137736541979,GC-191739758164,GC-92734552628,GC-92754819757
link: </hs/hsstatic/jquery-libs/static-1.4/jquery/jquery-1.11.2.js>; rel=preload; as=script,<https://lending.figured.com/hubfs/hub_generated/module_assets/1/92107133016/1743546996413/module_Lending-Banner.min.css>; rel=preload; as=style,<https://lending.figured.com/hubfs/hub_generated/module_assets/1/136545697437/1743547010363/module_Finance_Products_Sep23.min.css>; rel=preload; as=style,<https://lending.figured.com/hubfs/hub_generated/module_assets/1/53681143576/1743546964815/module_Social_Icons.min.css>; rel=preload; as=style,<https://secure.visionary-business-52.com/js/266244.js>; rel=preload; as=script,<//7052064.fs1.hubspotusercontent-na1.net/hubfs/7052064/hub_generated/template_assets/DEFAULT_ASSET/1778089439092/template_layout.min.css>; rel=preload; as=style,<https://lending.figured.com/hubfs/hub_generated/template_assets/1/19714741933/1743442608731/template_Figured_October2019-style.min.css>; rel=preload; as=style
nel: {"report_to":"cf-nel","success_fraction":0.01,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=3oDPMFllq7moa4d%2BF0ccygV0T6u8Zi7JPq0BE4%2BEv5zXyylOocck%2Fd2D59%2BsixpZdb0REe0Iliox%2Fi5QrHHcOahljXRht%2BzennzKYSLO0IAxXVbg7AiK7VIEG9hBuhOXtUTmbFc%3D"}]}
x-hs-cache-config: BrowserCache-5s-EdgeCache-5s
x-hs-cache-control: s-maxage=36000, max-age=0
x-hs-cf-cache-status: HIT
x-hs-cfworker-meta: {"contentType":"SITE_PAGE","resolver":"PreRenderedContentResolver"}
x-hs-content-campaign-id: 2080e5fb-710a-4295-8b0d-352a335b136f
x-hs-content-id: 114967653176
x-hs-hub-id: 6511526
x-hs-portal-id: 6511526
x-hs-prerendered: Thu, 07 May 2026 03:40:23 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance