cfr.org | Analytics by SecurityHeaders

HTTP Headers report for cfr.org

Header Name Header Data
HTTP status code 200
Connection keep-alive
Access-Control-Max-Age 1000
Content-Type text/html; charset=UTF-8
Cf-Ray 92bd00dffc1ab927-AMS
Expires Mon, 07 Apr 2025 04:00:01 GMT
Link <//cdn.cfr.org>; rel=preconnect; crossorigin
Strict-Transport-Security max-age=15552000; includeSubDomains; preload
X-Generator Drupal 10 (https://www.drupal.org)
Cf-Cache-Status DYNAMIC
X-Cache HIT, HIT
X-Consumer-Id 9e2f7b1b-2018-49c3-abd6-20fa51074864
X-Drupal-Dynamic-Cache MISS
X-Served-By cache-chi-klot8100115-CHI, cache-rtm-ehrd2290021-RTM
Access-Control-Allow-Origin *
Vary Accept-Encoding, Cookie, X-Consumer-ID, Cookie, Cookie
X-Content-Type-Options nosniff
X-Timer S1743897610.280268,VS0,VE2
Content-Language en
X-Cache-Hits 32, 5
X-Robots-Tag all
X-Styx-Req-Id 1930bf1a-11b2-11f0-bffe-8a1804ab916c
Server cloudflare
Access-Control-Allow-Headers x-requested-with, Content-Type, origin, authorization, accept, client-security-token
X-Drupal-Cache MISS
Via 1.1 varnish, 1.1 varnish
Access-Control-Allow-Methods POST, GET, OPTIONS
Date Sun, 06 Apr 2025 00:00:10 GMT
Cache-Control max-age=86400, public
X-Pantheon-Styx-Hostname styx-fe4-b-79d9f55b98-hg7gl
Age 85901
Last-Modified Sat, 05 Apr 2025 00:08:27 GMT

About the tool

By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.

This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.

We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.

Watch it now at TrustRadar