HTTP Headers Analysis for https://account-status.amazon.com

Detected Technologies from Headers

See all in URL Inspect 2

AWS CloudFront

Amazon S3

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=47474747; includeSubDomains; preload

Content-Security-Policy

Weak

upgrade-insecure-requests; report-uri Analyze

Content-Security-Policy-Report-Only

Basic

default-src; report-uri Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Present

ch-dpr=(self "https://m.media-amazon.com" "https://images-na.ssl-images-amazon.com"), ch-viewport-width=(self "https://m.media-amazon.com" "https://images-na.ssl-images-amazon.com"), ch-downlink=(self "https://m.media-amazon.com" "https://images-na.ssl-images-amazon.com"); +1 more

Recommendations

• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

Performance Headers

Connection

Performance

close

Content-Encoding

Performance

gzip

Transfer-Encoding

Performance

chunked

Vary

Performance

User-Agent,Accept-Encoding

connection: close
content-encoding: gzip
transfer-encoding: chunked
vary: User-Agent,Accept-Encoding

Caching Headers

Cache-Control

Caching

no-cache

Expires

Caching

-1

Pragma

Caching

no-cache

cache-control: no-cache
expires: -1
pragma: no-cache

Content Headers

Content-Encoding

Content

gzip

Content-Language

Content

en-US

Content-Type

Content

text/html;charset=UTF-8

content-encoding: gzip
content-language: en-US
content-type: text/html;charset=UTF-8

Server Headers

Server

server: Server

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: session-id=141-3584499-3392512; Domain=.amazon.com; Expires=Fri, 27-Aug-2027 19:40:00 GMT; Path=/; Secure
session-id-time=2082787201l; Domain=.amazon.com; Expires=Fri, 27-Aug-2027 19:40:00 GMT; Path=/; Secure
sst-main=Sst1|PQJ2H8TNtxBd7XvwOwdubmXQBwnmPvB6i0Er2h9cj_KDhpFXbwYToKvEEJ-qxMdaqf3tCELyZ9iMy6P3CzKfpyOevFRG4g3amLfIbV2umUjnazHBLeqL3db5vnp8fF_5oyHDgr57Am4XYqBZkfp5QzIMXLbufaCbtj4fs_RHZ1ytsJ0JREK1vc25x0o1gmPQ1yRJ_74ExKUXncF78D2jYcOnD3bZCNLOe2u64R_847Nn2Iyr43o_TlXJzZgjq_0aFTse; Domain=.amazon.com; Expires=Fri, 27-Aug-2027 19:40:00 GMT; Path=/; Secure; HttpOnly; SameSite=Lax
i18n-prefs=USD; Domain=.amazon.com; Expires=Fri, 27-Aug-2027 19:40:00 GMT; Path=/
lc-main=en_US; Domain=.amazon.com; Expires=Fri, 27-Aug-2027 19:40:00 GMT; Path=/
skin=noskin; path=/; domain=.amazon.com

Other Headers

Accept-Ch

Other

ect,rtt,downlink,device-memory,sec-ch-device-memory,viewport-width,sec-ch-viewport-width,dpr,sec-ch-dpr,sec-ch-ua-full-version-list,viewport-height,sec-ch-viewport-height,sec-ch-ua-platform,sec-ch-ua-platform-version

Accept-Ch-Lifetime

Other

86400

Alt-Svc

Other

h3=":443"; ma=86400

Date

Other

Thu, 27 Aug 2026 19:40:00 GMT

Edge-Cache-Control

Other

no-store,no-cache,stale-if-error=0,stale-while-revalidate=0

Via

Other

1.1 3b66cea026f27925ba048cc96a0885ca.cloudfront.net (CloudFront)

X-Amz-Cf-Id

Other

yJc0n2vm3uULl9O2mIoee05JZoDgwjdqXetXXW_P66etZR6oC7U4bA==

X-Amz-Cf-Pop

Other

IAD61-P10

X-Amz-Rid

Other

J3ET6FXMG4TW5S9X5Y2W

X-Cache

Other

Miss from cloudfront

X-Ua-Compatible

Other

IE=edge

accept-ch: ect,rtt,downlink,device-memory,sec-ch-device-memory,viewport-width,sec-ch-viewport-width,dpr,sec-ch-dpr,sec-ch-ua-full-version-list,viewport-height,sec-ch-viewport-height,sec-ch-ua-platform,sec-ch-ua-platform-version
accept-ch-lifetime: 86400
alt-svc: h3=":443"; ma=86400
date: Thu, 27 Aug 2026 19:40:00 GMT
edge-cache-control: no-store,no-cache,stale-if-error=0,stale-while-revalidate=0
via: 1.1 3b66cea026f27925ba048cc96a0885ca.cloudfront.net (CloudFront)
x-amz-cf-id: yJc0n2vm3uULl9O2mIoee05JZoDgwjdqXetXXW_P66etZR6oC7U4bA==
x-amz-cf-pop: IAD61-P10
x-amz-rid: J3ET6FXMG4TW5S9X5Y2W
x-cache: Miss from cloudfront
x-ua-compatible: IE=edge

Recommendations

No recommendations at this time