HTTP Headers Analysis for https://workers.cloudflare.com

Open Cached · just now

30 Headers

Detected Technologies from Headers

See all in URL Inspect 21

Cloudflare NEL Monitoring

Adobe Marketo

Microsoft Advertising

Cloudflare

Cloudflare CDN

Cloudflare Images

Cloudflare Stream

Cloudflare Turnstile

Cloudflare Web Analytics

Demandbase

Google Analytics

Google Conversion Tracking

Google DoubleClick

Google Tag Manager

Google Translate

OneTrust

Qualified

6sense Active incidents

The Trade Desk

Twitter

HTTP Security Headers

Status

Strict-Transport-Security

Good

max-age=31536000; includeSubDomains

Content-Security-Policy

Basic

default-src; script-src; style-src; +11 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

geolocation=(), camera=(), microphone=()

Recommendations

• Consider adding 'preload' to HSTS for maximum security
• Improve CSP by adding more specific directives and removing 'unsafe-inline'

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

Transfer-Encoding

Performance

chunked

Vary

Performance

accept-encoding

accept-ranges: bytes
connection: close
transfer-encoding: chunked
vary: accept-encoding

Caching Headers

Age

Caching

Cache-Control

Caching

max-age=10

Last-Modified

Caching

Sun, 23 Aug 2026 05:37:11 GMT

age: 7
cache-control: max-age=10
last-modified: Sun, 23 Aug 2026 05:37:11 GMT

Content Headers

Content-Type

Content

text/html; charset=utf-8

content-type: text/html; charset=utf-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

set-cookie: _ga=GA1.1.5e0ea0a0-2ab1-4aca-9bea-80b5ee52a4af; Expires=Thu, 23 Sep 2027 05:37:19 GMT; Path=/
cfz_google-analytics_v4={"nzcr_ga4":{"v":"5e0ea0a0-2ab1-4aca-9bea-80b5ee52a4af","e":1821677839056}}; Expires=Thu Sep 23 2027 05:37:19 GMT+0000 (Coordinated Universal Time); HttpOnly; SameSite=Lax; Path=/; Secure
cfz_adobe={"MsVJ_ecid":{"v":"CiYyMDQ0ODIyMzQxNzMwMzI2OTA5MjkxMDExNjM0NDE2MTEwNDMyN1IOCNql_uiCNCoDVkE2MALwAdql_uiCNA==","e":1821591439068}}; Expires=Wed Sep 22 2027 05:37:19 GMT+0000 (Coordinated Universal Time); HttpOnly; SameSite=Lax; Path=/; Secure
kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiYyMDQ0ODIyMzQxNzMwMzI2OTA5MjkxMDExNjM0NDE2MTEwNDMyN1IOCNql_uiCNCoDVkE2MALwAdql_uiCNA==; Expires=Wed, 22 Sep 2027 05:37:19 GMT; Path=/; Secure; SameSite=Lax
__cf_bm=Az9yaDN2Yo6v0DpIKkM6BFaakn_36cgPISwv1I.hUuo-1787463439.043217-1.0.1.1-nW5WN6nZYQDFPVoiVpkmXqPhwDi53ZShnsiNVJtUuqgYU9syo7ZMGCOLI9GORhhTKtiBqu8RlZ_ltwHd.qdYLxNUrDw.7w7K7c4H2hA8s0lNPthr.ltmqFe_GhV1gRkIUXWiDt3sxxo9s3B9f0qVVw; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.cloudflare.com; Expires=Sun, 23 Aug 2026 06:07:19 GMT

Other Headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Cache-Status

Other

HIT

Cf-Placement

Other

local-IAD

Cf-Ray

Other

a2f7c3be0e6c9c5b-IAD

Date

Other

Sun, 23 Aug 2026 05:37:19 GMT

Link

Other

URL

https://www.cloudflare.com/.well-known/agents.json

rel=api-catalog

URL

https://www.cloudflare.com/.well-known/webmcp.json

rel=service-desc

URL

https://www.cloudflare.com/openapi.json

rel=service-desc

URL

https://www.cloudflare.com/llms.txt

rel=service-doc

Nel

Other

Report-To Group cf-nel max-age: 1w

success: 0.0%

Report-To

Other

Group cf-nel max-age: 1w

Endpoint 1 https://a.nel.cloudflare.com/report/v4?s=p3J4BiZuYgK0cmTNXq3APMXT0Bi5cD16ayIINxrweLRmI75PsNzSpEkJAXP91iOuoMIVd3RNaKAV2%2FwsEZfIethc%2F9O6iO3MsiBPV7Gkz95E3flsTGGqeoVfQKV%2FQwF3%2BUsBAQ%3D%3D

Server-Timing

Other

cfCacheStatus;desc="HIT", cfEdge;dur=8,cfOrigin;dur=0,cfWorker;dur=19

X-Rm

Other

X-Served-By

Other

marketing-site

alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
cf-placement: local-IAD
cf-ray: a2f7c3be0e6c9c5b-IAD
date: Sun, 23 Aug 2026 05:37:19 GMT
link: <https://www.cloudflare.com/.well-known/agents.json>; rel="api-catalog", <https://www.cloudflare.com/.well-known/webmcp.json>; rel="service-desc", <https://www.cloudflare.com/openapi.json>; rel="service-desc", <https://www.cloudflare.com/llms.txt>; rel="service-doc", <https://www.cloudflare.com/sitemap.xml>; rel="sitemap", </fonts/Kunst%20Grotesk%20Regular.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin, </fonts/Kunst%20Grotesk%20Medium.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin, <https://ot.www.cloudflare.com>; rel=preconnect; crossorigin, <https://imagedelivery.net>; rel=preconnect; crossorigin
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=p3J4BiZuYgK0cmTNXq3APMXT0Bi5cD16ayIINxrweLRmI75PsNzSpEkJAXP91iOuoMIVd3RNaKAV2%2FwsEZfIethc%2F9O6iO3MsiBPV7Gkz95E3flsTGGqeoVfQKV%2FQwF3%2BUsBAQ%3D%3D"}]}
server-timing: cfCacheStatus;desc="HIT", cfEdge;dur=8,cfOrigin;dur=0,cfWorker;dur=19
x-rm: GW
x-served-by: marketing-site

Recommendations

Enable compression (gzip/brotli) to improve performance