HTTP Headers Analysis for https://web.delighted.com

Open Cached · just now

18 Headers

Detected Technologies from Headers

See all in URL Inspect 20

Google Analytics

Google Cloud Storage

Google Conversion Tracking

Google DoubleClick

Google Tag Manager

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Basic

default-src; font-src; style-src; +7 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Improve CSP by adding more specific directives and removing 'unsafe-inline'
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

connection: close
transfer-encoding: chunked
vary: Accept-Encoding

Caching Headers

No caching headers found

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

X-Runtime

Server

0.071695

x-runtime: 0.071695

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: do=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklqSXVMbDhpIiwiZXhwIjoiMjAyNi0wNS0xMlQyMjozOTowMy43MTdaIiwicHVyIjoiY29va2llLmRvIn19--75926f50c24649ea8c05797325e4b2cc06b341cf; domain=delighted.com; path=/; expires=Tue, 12 May 2026 22:39:03 GMT; SameSite=Lax; secure
lid=eyJfcmFpbHMiOnsibWVzc2FnZSI6IklqTTVNek01TlRnMElnPT0iLCJleHAiOiIyMDI2LTA1LTEyVDIyOjM5OjAzLjczOVoiLCJwdXIiOiJjb29raWUubGlkIn19--b6afb9e4831c1eb8ebff9360189fae9af6cdf28c; domain=.delighted.com; path=/; expires=Tue, 12 May 2026 22:39:03 GMT; SameSite=Lax; secure
d_csrf_token=e341f7f8c9abc684885097b483a470a1; domain=delighted.com; path=/; SameSite=Lax; secure
_delighted_session_v2=xfZtWHr3rxg%2BnQrweDiKzWRWzY5mKd30eWUcxSiM4fzTyRnCzJwtplSilIIcYhIn8ysEqp80gh7E%2FtewHUzmMSfwv20g2hvwsalyiD5fwHh5fKACnIjNYGV1UlzmzB7RJFxvlhk9Lxk7GMQcggsDdwoYXDXTsxB38qvYIF2Tn8r5rR%2BYjhtKysOg9EhCPlE%2BCxJj%2B8g53yHqxHDKHXS%2Fb6eiPBfK3ATTJu5aAYx2EcqTg%2FZ8BIJU84CC3cssDp8b9rxrcB9dEnY3iEOU7hiBApIKGu7j8cjG%2F4u7EQ9B2eXTZCQ3mk83Uts%2FcVCOCOeDa5xwNZMopf8H--kH8c9zWuFVW9VhkP--PaNY04GdNd9FfcWF%2FAIqSA%3D%3D; domain=app.delighted.com; path=/; secure; HttpOnly; SameSite=Lax

Other Headers

Date

Other

Sun, 12 Apr 2026 22:39:03 GMT

Link

Other

URL

https://dcx14qs33eg2z.cloudfront.net/assets/fonts-59bf510f21a995018951764903f53d7373d86e33b0b6c3b5f6a6e84117b3791f.css

rel=preload as=style nopush

URL

https://dcx14qs33eg2z.cloudfront.net/assets/marketing-0a86e12b4262d15da65723095a7c4deaf9d21e3162969521818887ed63772476.css

rel=preload as=style nopush

URL

https://app-sj30.marketo.com/js/forms2/js/forms2.min.js

rel=preload as=script nopush

URL

https://dcx14qs33eg2z.cloudfront.net/assets/marketing-d8396cc806dff47a662c967a22273a27f4138b2f71e07b1c3cc8875d10ebde2e.js

rel=preload as=script nopush

Status

Other

200 OK

X-Permitted-Cross-Domain-Policies

Other

none

X-Request-Id

Other

336f7106fed609673fb3fa4e64121a2b

X-Ua-Compatible

Other

IE=Edge,chrome=1

date: Sun, 12 Apr 2026 22:39:03 GMT
link: <https://dcx14qs33eg2z.cloudfront.net/assets/fonts-59bf510f21a995018951764903f53d7373d86e33b0b6c3b5f6a6e84117b3791f.css>; rel=preload; as=style; nopush,<https://dcx14qs33eg2z.cloudfront.net/assets/marketing-0a86e12b4262d15da65723095a7c4deaf9d21e3162969521818887ed63772476.css>; rel=preload; as=style; nopush,<https://app-sj30.marketo.com/js/forms2/js/forms2.min.js>; rel=preload; as=script; nopush,<https://dcx14qs33eg2z.cloudfront.net/assets/marketing-d8396cc806dff47a662c967a22273a27f4138b2f71e07b1c3cc8875d10ebde2e.js>; rel=preload; as=script; nopush
status: 200 OK
x-permitted-cross-domain-policies: none
x-request-id: 336f7106fed609673fb3fa4e64121a2b
x-ua-compatible: IE=Edge,chrome=1

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching