HTTP Headers Analysis for https://live.octave.com

Detected Technologies from Headers

See all in URL Inspect 4

AWS

AWS API Gateway

AWS CloudFront

Cloudflare CDN

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Basic

script-src; frame-ancestors; object-src; +2 more Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Present

interest-cohort=()

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Origin, Accept-Encoding

connection: close
transfer-encoding: chunked
vary: Origin, Accept-Encoding

Caching Headers

Cache-Control

Caching

no-cache, no-store, no-transform, must-revalidate, private, no-cache, no-store, max-age=0, must-revalidate

Expires

Caching

Thu, 01 Jan 1970 00:00:00 GMT

cache-control: no-cache, no-store, no-transform, must-revalidate, private, no-cache, no-store, max-age=0, must-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT

Content Headers

Content-Type

Content

text/html;charset=utf-8

content-type: text/html;charset=utf-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: eventguestside-service-session=node0nd6ii7mzpehys2rcc264cjmv13821.node0; Path=/; Secure; HttpOnly; SameSite=Lax
event-snapshot-version=wwMb5aWbQkHseevnGfXED6CkxqcoMXSR; Path=/event/d450e196-7abc-42d0-b80f-3a6022f86e93; Secure; HttpOnly; SameSite=strict

Other Headers

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

9f68ea61bd2807f2-IAD

Date

Other

Mon, 04 May 2026 16:34:55 GMT

Document-Policy

Other

js-profiling

Feature-Policy

Other

interest-cohort=()

Httplogrequestid

Other

c8033ea6-8670-4d8c-b414-d131b8a0aadd, dbe5c1d7-44f4-47a7-a35b-58c4c8c5db94

Via

Other

1.1 8415794d557292780ff382a8c5bd6058.cloudfront.net (CloudFront), 1.1 5c0619c2b4b203373ee2c7edaded2214.cloudfront.net (CloudFront)

X-Amz-Apigw-Id

Other

c2SbTHe2oAMEvaQ=

X-Amz-Cf-Id

Other

ht6j5yNVgo-NEjWQDSzl3ck3c8cH8F7qp8mP6HbgO6cfYUhso2jeqA==

X-Amz-Cf-Pop

Other

IAD12-P1, IAD55-P4

X-Amzn-Remapped-Connection

Other

keep-alive

X-Amzn-Remapped-Date

Other

Mon, 04 May 2026 16:34:54 GMT

X-Amzn-Requestid

Other

b0eb6d63-c6cd-4f12-9e4c-6274bf219315

X-Cache

Other

Miss from cloudfront

X-Cvent-Version

Other

3.19.20

X-Middleware-Rewrite

Other

/event/d450e196-7abc-42d0-b80f-3a6022f86e93/summary?environment=P2

X-Request-Id

Other

c8033ea6-8670-4d8c-b414-d131b8a0aadd, dbe5c1d7-44f4-47a7-a35b-58c4c8c5db94

cf-cache-status: DYNAMIC
cf-ray: 9f68ea61bd2807f2-IAD
date: Mon, 04 May 2026 16:34:55 GMT
document-policy: js-profiling
feature-policy: interest-cohort=()
httplogrequestid: c8033ea6-8670-4d8c-b414-d131b8a0aadd, dbe5c1d7-44f4-47a7-a35b-58c4c8c5db94
via: 1.1 8415794d557292780ff382a8c5bd6058.cloudfront.net (CloudFront), 1.1 5c0619c2b4b203373ee2c7edaded2214.cloudfront.net (CloudFront)
x-amz-apigw-id: c2SbTHe2oAMEvaQ=
x-amz-cf-id: ht6j5yNVgo-NEjWQDSzl3ck3c8cH8F7qp8mP6HbgO6cfYUhso2jeqA==
x-amz-cf-pop: IAD12-P1, IAD55-P4
x-amzn-remapped-connection: keep-alive
x-amzn-remapped-date: Mon, 04 May 2026 16:34:54 GMT
x-amzn-requestid: b0eb6d63-c6cd-4f12-9e4c-6274bf219315
x-cache: Miss from cloudfront
x-cvent-version: 3.19.20
x-middleware-rewrite: /event/d450e196-7abc-42d0-b80f-3a6022f86e93/summary?environment=P2
x-request-id: c8033ea6-8670-4d8c-b414-d131b8a0aadd, dbe5c1d7-44f4-47a7-a35b-58c4c8c5db94

Recommendations

Enable compression (gzip/brotli) to improve performance