HTTP Headers Analysis for https://app.ap1.tray.io

Detected Technologies from Headers

See all in URL Inspect 15

AWS CloudFront

Adobe Marketo

Amazon S3

Fullstory

Google reCAPTCHA

Google Search

Google Static File Front End

Google Tag Manager

Headway

Intercom

Mixpanel

Report URI

Segment

Visual Website Optimizer

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Basic

frame-ancestors; object-src; script-src; +2 more Analyze

X-Frame-Options

Good

sameorigin

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Accept-Ranges

Performance

bytes

Connection

Performance

close

Vary

Performance

Accept-Encoding

accept-ranges: bytes
connection: close
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

no-cache, max-age=0, must-revalidate

Etag

Caching

"1edaa73de683bb944d6f4b825a4570b9"

Last-Modified

Caching

Fri, 16 Oct 2026 11:56:58 GMT

cache-control: no-cache, max-age=0, must-revalidate
etag: "1edaa73de683bb944d6f4b825a4570b9"
last-modified: Fri, 16 Oct 2026 11:56:58 GMT

Content Headers

Content-Length

Content

15845

Content-Type

Content

text/html; charset=utf-8

content-length: 15845
content-type: text/html; charset=utf-8

Server Headers

Server

AmazonS3

server: AmazonS3

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Fri, 16 Oct 2026 15:38:42 GMT

Report-To

Other

Group default max-age: 52w

Endpoint 1 https://testingtray.report-uri.com/a/d/g

Via

Other

1.1 01e2110cbab4e85fc866324c9ddb3d6e.cloudfront.net (CloudFront)

X-Amz-Cf-Id

Other

6M_CN86YKnqJnLA_pNf0QuNRDUfJiAvAAdo15jmrei5AtSTofRl7PA==

X-Amz-Cf-Pop

Other

IAD55-P9

X-Amz-Server-Side-Encryption

Other

AES256

X-Cache

Other

Miss from cloudfront

date: Fri, 16 Oct 2026 15:38:42 GMT
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://testingtray.report-uri.com/a/d/g"}],"include_subdomains":true}
via: 1.1 01e2110cbab4e85fc866324c9ddb3d6e.cloudfront.net (CloudFront)
x-amz-cf-id: 6M_CN86YKnqJnLA_pNf0QuNRDUfJiAvAAdo15jmrei5AtSTofRl7PA==
x-amz-cf-pop: IAD55-P9
x-amz-server-side-encryption: AES256
x-cache: Miss from cloudfront

Recommendations

Enable compression (gzip/brotli) to improve performance