HTTP Headers Analysis for https://support.flowroute.com

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

accelerometer=(), ambient-light-sensor=(), autoplay=(*), camera=(*), clipboard-write=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(*), midi=(), payment=(), usb=(), fullscreen=(*)

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Content-Type-Options: nosniff

Performance Headers

3 headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

Caching Headers

2 headers

Cache-Control

Caching

public, max-age=0, stale-while-revalidate=300, stale-if-error=60

Etag

Caching

W/"3d996-qIRHf4kS/2OHxXXMSg13P9ORzgU"

Content Headers

1 headers

Content-Type

Content

text/html; charset=utf-8

Server Headers

1 headers

Server

cloudflare

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

Cookies

__cf_bm=2EVaW1xrnmiH4WCV5swe1u_ljD_zdgtemfolfvKrrQE-1768863391.8578362-1.0.1.1-qhnURZUVYQJ6RPWfobaacF7z3Xe2lgTFwTShI5jXTdZ6ekxFvcZXQVtoc7fKmS4MJz_SCCnqAB08HaYOhUzrdXC7Nhnbn92008VFElFQ_tnjzfonmQEEE2x35va50ouA; HttpOnly; Secure; Path=/; Domain=document360.io; Expires=Mon, 19 Jan 2026 23:26:32 GMT