Substack

substack.com · HTTP 200 in 2,822 ms

8 things were found in the response on 06.10.2026. This is the front door only: whatever runs behind a login, and anything a browser would have to execute to reveal, is not here.

What the page is built with

Expressweb frameworks · web servers

header — x-powered-by: Express

Node.jsprogramming languages

implied — implied by Express

Where it is served from

Amazon Web Servicespaas

script — inline script matches \.amazonaws\.com

Cloudflarecdn

header — server: cloudflare
header — cf-cache-status: DYNAMIC

Where the words and pictures live

Substackblogs

header — x-cluster: substack
header — x-served-by: Substack

What stands at the door

Cloudflare Bot Managementsecurity

cookie — cookie __cf_bm

HSTSsecurity

header — strict-transport-security: max-age=31536000; includeSubDomains; preload

Everything else

HTTP/3miscellaneous

header — alt-svc: h3=":443"; ma=86400

Back to the census.