HTTP Headers Analysis for https://web.grindr.com

Detected Technologies from Headers

See all in URL Inspect 18

Apple ID

AWS CloudFront

Ketch

Amplitude

Amazon S3

Cloudflare CDN

Facebook

GIPHY

Google reCAPTCHA

Google Search

Google Static File Front End

Google Sign-In

jsDelivr

Mapbox

OneTrust

Sentry

unpkg

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Good

default-src; script-src; font-src; +10 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Strengthen CSP by removing 'unsafe-eval'
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding,Origin

connection: close
transfer-encoding: chunked
vary: Accept-Encoding,Origin

Caching Headers

Age

Caching

3211

Cache-Control

Caching

private, no-cache, no-store, must-revalidate

Last-Modified

Caching

Mon, 20 Apr 2026 18:57:32 GMT

age: 3211
cache-control: private, no-cache, no-store, must-revalidate
last-modified: Mon, 20 Apr 2026 18:57:32 GMT

Content Headers

Content-Type

Content

text/html

content-type: text/html

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

Access-Control-Allow-Credentials

Cors

true

Access-Control-Allow-Origin

Cors

https://web.grindr.com

access-control-allow-credentials: true
access-control-allow-origin: https://web.grindr.com

Cookies Headers

Set-Cookie

Cookies

set-cookie: __cf_bm=YS5Fj4.IHGYBNJ52KzbJ7DHDPkPdMkqnksCk9wKbUHA-1777392953.6185176-1.0.1.1-arW4m6.fsJnDXs0AgTApnemfERbsm3tkXpiaJVpOdxbmlT.foHzNjjwTKpZ9uoNKD26TzNuT.l3cAH_Kth3IcGmzjCRtwwWYoigR4IqlkXBJf7ub__pUDxrDX8r8xNLf; HttpOnly; Secure; Path=/; Domain=grindr.com; Expires=Tue, 28 Apr 2026 16:45:53 GMT

Other Headers

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

9f375e481b8fd673-IAD

Date

Other

Tue, 28 Apr 2026 16:15:53 GMT

Via

Other

1.1 91dd8eacda47a6712fbf02ab7b41ecce.cloudfront.net (CloudFront)

X-Amz-Cf-Id

Other

SOXYZcSUHjBoNhsqQWnUXbg3cy0M5biXQNAcSQ0UKwwFySeyxVNMMw==

X-Amz-Cf-Pop

Other

CMH68-P1

X-Amz-Server-Side-Encryption

Other

AES256

X-Amz-Version-Id

Other

lre8trXYLaZhiNOGPoL7YgGXVe8A1EVx

X-Cache

Other

Hit from cloudfront

cf-cache-status: DYNAMIC
cf-ray: 9f375e481b8fd673-IAD
date: Tue, 28 Apr 2026 16:15:53 GMT
via: 1.1 91dd8eacda47a6712fbf02ab7b41ecce.cloudfront.net (CloudFront)
x-amz-cf-id: SOXYZcSUHjBoNhsqQWnUXbg3cy0M5biXQNAcSQ0UKwwFySeyxVNMMw==
x-amz-cf-pop: CMH68-P1
x-amz-server-side-encryption: AES256
x-amz-version-id: lre8trXYLaZhiNOGPoL7YgGXVe8A1EVx
x-cache: Hit from cloudfront

Recommendations

Enable compression (gzip/brotli) to improve performance