HTTP Headers Analysis for https://support.marketspark.com

Detected Technologies from Headers

See all in URL Inspect 4

Cloudflare NEL Monitoring

Cloudflare CDN

Envoy

Next.js

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains;

Content-Security-Policy

Weak

form-action Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Significantly strengthen CSP directives
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

connection: close
transfer-encoding: chunked
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

private, no-cache, no-store, max-age=0, must-revalidate

cache-control: private, no-cache, no-store, max-age=0, must-revalidate

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

X-Powered-By

Server

Next.js

server: cloudflare
x-powered-by: Next.js

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _zendesk_shared_session=-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%3D%3D--b477336a3999676dc903a46f97638581490dea90; path=/; secure; HttpOnly; SameSite=None
_zendesk_session=rARo1mk%2BnaZyEceOpH9sddVESGdJrHcs00qsukQu%2FnWniSMDXBzVMYrA8T6XPZ%2BSrbH6OPkDoeLKdzo%2BcQvW14zUerWaAMwqkvaSaleCvd6riAnIh88Yoo56uPJA8HXhlv3as2eC%2B7Lo0N96AaOyUXkwfjTEuGRQngk3taUvTz4APlurCalDuf1v7Tr0vZHWL7EEiB27IuvBFot4uBfajPFutagLSS4%2FHUNZhaOnjqw%2FSCZks6PwtiVPk3JL%2FFSs0Rm3HBaSkfLwPNIOMdbidqarzfoMLEBo8%2BzQ3ONb%2F91IfNttV0zvMyx3su9IWR1hv%2Fw1xUUJ7W4zgQhQVcn%2BJBvoTrueXeOynJKs%2FgFThXeVsINrSxfy%2BS3rTX8FRnwXaEeCDIIQjk%2BWOCxg5x7oog80guilXVHJiq5ktB0XwPASMNoWhg5bbQ4cLhsQu0%2BiwdSiMlEpR1CkbmZ8ItCPpopnDY8F1bMKK4LLRnHJpF06b9R42VmbhGjKD%2BvKnEF%2BJLp1d2W1P6a%2BjfUkD3fDuHk4RnD%2Flc6XVukwFO%2FdQOdAalIWPU1zLixDbvgpUGsioPnViQiDDZtGuiruBppQRpoCiEJy64xkuivciQ%3D%3D--ey4r5vw7fibWLF%2BO--S%2Fr4rfLqPYrEoYSkpZy7sg%3D%3D; path=/; secure; HttpOnly; SameSite=None
_zendesk_login_session=Fe26.2*1*ac48833f32e7772f75d45aee92e65fdd4bb384ac87842f734b0d948a87ab0958*TwDm7JLP4_NMwIQ3dAuCkQ*eLJq3Whj7XEK15iM7XOXiJktdWjcs1GcdVJXUkKzv5Ub61gC7QBgOg_byN2MQe68IujWeDNnV2qCqG8GLFLtXt3qCAoWo10uQFwLRTWircZJS3FXqc85UE3vAkHKsXkG*1778225669560*75b150b739c116553ad0f8f775f9efb046d3372f2960c1cf9bd358accf89b0a8*2JeiWTFEU1_hTtQn_rZC_c6yX7EFMByCEmKZyvCagpU~2; Max-Age=300; Path=/; HttpOnly; Secure; SameSite=Strict
__cf_bm=dv1J2PVBCZnXzU9REplIncloyWcqjp9Ju_fI0wmvsmQ-1778225309-1.0.1.1-x2VTGIgZCXzaFJEslwXCCyrhz.KNNuFCaKZS.csYsLEAnAOx.uidA___FOFFAlt0bqZTNz1MLOeeZ2fHrRnwU0pfUuL6wiHVBW.6jiG3GBo; path=/; expires=Fri, 08-May-26 07:58:29 GMT; domain=.support.marketspark.com; HttpOnly; Secure; SameSite=None
_cfuvid=nVfQg6yrc1a1OseCDR9ZKLCuTRvVT47RdGoyPqFbW94-1778225309608-0.0.1.1-604800000; path=/; domain=.support.marketspark.com; HttpOnly; Secure; SameSite=None

Other Headers

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

9f86bf770cd1c995-IAD

Date

Other

Fri, 08 May 2026 07:28:29 GMT

Nel

Other

Report-To Group cf-nel max-age: 1w

success: 1.0%

Report-To

Other

Group cf-nel max-age: 1w

Endpoint 1 https://a.nel.cloudflare.com/report/v4?s=NrcFBKS9B%2FDZcYb9t6f3GZ7PCuYNjlmvLFaWVd97No5YHzX76IngMeztYl2JOfYvBf%2FI%2FUVeefYZHWheZe2HIoTWPvTWpykVfIbv%2BFaa5WsoKIeems8eWEPibsJjeMctUkmES1E%2BLFu1

Via

Other

zorg

X-Envoy-Decorator-Operation

Other

/auth/v3

X-Envoy-Upstream-Service-Time

Other

70

X-Request-Id

Other

9f86bf770cd1c995-IAD

X-Zendesk-Zorg

Other

yes

Zendesk-Ep

Other

5

Zendesk-Service

Other

login-ui-service

cf-cache-status: DYNAMIC
cf-ray: 9f86bf770cd1c995-IAD
date: Fri, 08 May 2026 07:28:29 GMT
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NrcFBKS9B%2FDZcYb9t6f3GZ7PCuYNjlmvLFaWVd97No5YHzX76IngMeztYl2JOfYvBf%2FI%2FUVeefYZHWheZe2HIoTWPvTWpykVfIbv%2BFaa5WsoKIeems8eWEPibsJjeMctUkmES1E%2BLFu1"}],"group":"cf-nel","max_age":604800}
via: zorg
x-envoy-decorator-operation: /auth/v3
x-envoy-upstream-service-time: 70
x-request-id: 9f86bf770cd1c995-IAD
x-zendesk-zorg: yes
zendesk-ep: 5
zendesk-service: login-ui-service

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology