HTTP Headers Analysis for https://signrequest.com

Detected Technologies from Headers

See all in URL Inspect 22

AWS CloudFront

Amazon S3

Capterra

Cookiebot

Dropbox

Facebook

Google Analytics

Google API JS Client

Google Conversion Tracking

Google DoubleClick

Google Fonts

Google Hosted Libraries

Google Optimize

Google Tag Manager

New Relic

Nginx

Statuspage

Stripe

Webflow

Zapier

Zendesk

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload; always

Content-Security-Policy

Basic

default-src; script-src; style-src; +3 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Vary

Performance

Accept-Encoding, Accept-Language, Cookie

connection: close
vary: Accept-Encoding, Accept-Language, Cookie

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store, must-revalidate, private

Expires

Caching

Wed, 29 Apr 2026 03:40:51 GMT

cache-control: max-age=0, no-cache, no-store, must-revalidate, private
expires: Wed, 29 Apr 2026 03:40:51 GMT

Content Headers

Content-Language

Content

en

Content-Length

Content

25472

Content-Type

Content

text/html; charset=utf-8

content-language: en
content-length: 25472
content-type: text/html; charset=utf-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: sr_uuid=""; Domain=.signrequest.com; expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/
sessionid=gusw8rptld947p742n67m4uuywmgxu2d; Domain=.signrequest.com; expires=Mon, 04 May 2026 03:40:51 GMT; HttpOnly; Max-Age=432000; Path=/; Secure
sr_device_id=e1a3662e-824a-488b-a782-d8fe50682b73; Domain=.signrequest.com; expires=Tue, 24 Apr 2046 03:40:51 GMT; Max-Age=630720000; Path=/; Secure

Other Headers

Date

Other

Wed, 29 Apr 2026 03:40:51 GMT

Via

Other

1.1 56bbab08f5381e532e122035df26be58.cloudfront.net (CloudFront)

X-Amz-Cf-Id

Other

l2uqqtUtF4rH8Iu3uua72hkhJafHDxoECNaHF7YH0IprWpOjUtovQQ==

X-Amz-Cf-Pop

Other

IAD61-P13

X-Cache

Other

Miss from cloudfront

date: Wed, 29 Apr 2026 03:40:51 GMT
via: 1.1 56bbab08f5381e532e122035df26be58.cloudfront.net (CloudFront)
x-amz-cf-id: l2uqqtUtF4rH8Iu3uua72hkhJafHDxoECNaHF7YH0IprWpOjUtovQQ==
x-amz-cf-pop: IAD61-P13
x-cache: Miss from cloudfront

Recommendations

Enable compression (gzip/brotli) to improve performance