HTTP Headers Analysis for https://survicate-cdn.com

Detected Technologies from Headers

See all in URL Inspect 27

AWS CloudFront

YouTube

Ahrefs

Calendly

Cloudflare CDN

Cloudflare CDNJS

Cookiebot

G2

Google AdSense

Google Analytics

Google API JS Client

Google Conversion Tracking

Google DoubleClick

Google Fonts

Google Tag Manager

HubSpot

HubSpot Analytics

HubSpot Forms

Intercom

jsDelivr

Leadfeeder

Mixpanel

PartnerStack

ShareThis

Storylane

Webflow

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Basic

default-src; media-src; img-src; +3 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

accept-encoding

connection: close
transfer-encoding: chunked
vary: accept-encoding

Caching Headers

Age

Caching

67655

Last-Modified

Caching

Tue, 24 Mar 2026 14:51:56 GMT

age: 67655
last-modified: Tue, 24 Mar 2026 14:51:56 GMT

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _cfuvid=2UJTpzT8E_cyqHOntqwUTzT6pg.LozDOsotN9QTQMTo-1774431572.336152-1.0.1.1-MlYgvWXxY0XQy4iKUkEqLLIvLuO4iJoeHEJj_NDf0X4; HttpOnly; SameSite=None; Secure; Path=/; Domain=web.survicate.com

Other Headers

Cf-Cache-Status

Other

HIT

Cf-Ray

Other

9e1cf2ef1d52e0e6-IAD

Date

Other

Wed, 25 Mar 2026 09:39:32 GMT

Report-To

Other

Group csp-endpoint-landing max-age: 18w

Endpoint 1 https://panel-api.survicate.com/_/report_csp/landing

Surrogate-Control

Other

max-age=432000

Surrogate-Key

Other

web.survicate.com 5fca234a1c4867bb3d78dced pageId:66013d0b89f0cd308fc0ecb8 66c5a83a53d939cd5eee01e0 68cae7423b91575f16d3e2e4 68b54ff706ed934b895b483e

Via

Other

1.1 874d2226efce88074e49219a95089ade.cloudfront.net (CloudFront)

X-Amz-Cf-Id

Other

k8CzcgdY0ZbxKLjitMH94vDCMCQK2heMyxLd9hOPPdk8ohUqtAGxGQ==

X-Amz-Cf-Pop

Other

IAD61-P9

X-Cache

Other

Miss from cloudfront

X-Lambda-Id

Other

7560a600-2035-4d48-aa48-ec31462a8e00

X-Wf-Region

Other

us-east-1

cf-cache-status: HIT
cf-ray: 9e1cf2ef1d52e0e6-IAD
date: Wed, 25 Mar 2026 09:39:32 GMT
report-to: { "group":"csp-endpoint-landing", "max_age":10886400, "endpoints": [{ "url":"https://panel-api.survicate.com/_/report_csp/landing" }] }
surrogate-control: max-age=432000
surrogate-key: web.survicate.com 5fca234a1c4867bb3d78dced pageId:66013d0b89f0cd308fc0ecb8 66c5a83a53d939cd5eee01e0 68cae7423b91575f16d3e2e4 68b54ff706ed934b895b483e
via: 1.1 874d2226efce88074e49219a95089ade.cloudfront.net (CloudFront)
x-amz-cf-id: k8CzcgdY0ZbxKLjitMH94vDCMCQK2heMyxLd9hOPPdk8ohUqtAGxGQ==
x-amz-cf-pop: IAD61-P9
x-cache: Miss from cloudfront
x-lambda-id: 7560a600-2035-4d48-aa48-ec31462a8e00
x-wf-region: us-east-1

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching