HTTP Headers Analysis for https://api.prupay.com

Detected Technologies from Headers

See all in URL Inspect 2

Cloudflare NEL Monitoring

Cloudflare CDN

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

connection: close
transfer-encoding: chunked

Caching Headers

Cache-Control

Caching

no-cache, private

cache-control: no-cache, private

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

Server

cloudflare

server: cloudflare

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: XSRF-TOKEN=eyJpdiI6IlZYSUhvNXV3aUdNY0RYY3VGZ3AybXc9PSIsInZhbHVlIjoiNWswL3JNRml3VFIvOE1tMWd2MnNyK1JFb2ZFUmw5MTVLbDNkdGtwMndtSmtYbHhTNEphMFVlOVhkSnpUczVOeW82bXFJR0ZkUWxSb25uSFA3dmk4SEQ4Q3BUTkc2aWFSbjVMR3cxOFgzOENrTCt2YktpUm81OTN0OWxOa0tTRXAiLCJtYWMiOiI0MTU5MjM1OTEwMDM2MWNlNThjNzEwZWUwYmU5ZTNmM2I5ZmZhZGRjY2JjZGExNmUwOTQ0YTllM2Y3ZWNkMzY5In0%3D; expires=Wed, 18-Feb-2026 18:56:07 GMT; Max-Age=14400; path=/
prupay_merchant_area_session=eyJpdiI6Im9SOW1COWR6UkRDVStPdDFaN0N3aWc9PSIsInZhbHVlIjoiMDRhRllmQU11OFFHMEhZb2F1K1dnV1R6NkVkcTR4TU5IZFFxWVU5a1U0RkJmdHJVVXlBY3U5VlVrOHIxbFdCc0ttdzQxUjNwSWI2UjNVM3B6ayt4clcxeVlZVUg3QlJKOUpwMWFmUjdFUFNNVVNQYUQ5M080VmNPUk1Dc29GVWUiLCJtYWMiOiI4Mjk1NzE5MWE4YjEyYzc1YWJkZDY1NjY1MWViZTEyMGQ5MzM3ODMzY2ZkM2IxZjQ2ZjM0NzNmMzJiNjc1OGVmIn0%3D; expires=Wed, 18-Feb-2026 18:56:07 GMT; Max-Age=14400; path=/; httponly

Other Headers

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

9cfe5e8f88cb208d-IAD

Date

Other

Wed, 18 Feb 2026 14:56:07 GMT

Nel

Other

{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}

Report-To

Other

{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qp6OrvOrjRev3GEUwaSAlC%2FxzcLo6nSJFYOOUuhTdTmABXrQuZzDrTMKZnBAoN4hbi6t%2BKTePQ7oxOJ352YyUW6WVPKQ01L%2FAdhpPy4%3D"}]}

cf-cache-status: DYNAMIC
cf-ray: 9cfe5e8f88cb208d-IAD
date: Wed, 18 Feb 2026 14:56:07 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qp6OrvOrjRev3GEUwaSAlC%2FxzcLo6nSJFYOOUuhTdTmABXrQuZzDrTMKZnBAoN4hbi6t%2BKTePQ7oxOJ352YyUW6WVPKQ01L%2FAdhpPy4%3D"}]}

Recommendations

Enable compression (gzip/brotli) to improve performance