HTTP Headers Analysis for https://fulfillment.paytm.com

Detected Technologies from Headers

See all in URL Inspect 2

OpenResty

Express

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

No caching headers found

Content Headers

Content-Length

Content

13

Content-Type

Content

text/html; charset=utf-8

content-length: 13
content-type: text/html; charset=utf-8

Server Headers

Server

openresty

X-Powered-By

Server

Express

server: openresty
x-powered-by: Express

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: _abck=5493AF9DDAF99CAD7E892C9521C975A0~-1~YAAQ46s3FxU+vFOdAQAAMhBtbw/qRh4uNkPNzJfoarQXRhXqOOxSnCTn2HdDz3ODSNNPOCSZOEPhkdRj9kYjWr8JAEWcVoliB5NG9nBsCvrHdauA9sBJ/iW/5MIrXekFq0eVcoTjI5u13VhHtyzClIQIq1Sqw52fla8eaPJOzZNPUj+yK+auFhXlBqAj5CopdNDAd+VR0cVh1wAPKHlQaoGw8YghpIVD0TNR5a2/bHQRb8zvqUMbnAbcGT7oPU3v8ePn9YldOG8QJ9YLXTNA6L5TxZpSz5Y9ERxwhxiBrmYefSPb5kszj/oWvgJavTkApCXWzD6ohOq1MbcecFF0vjx2Gi5g2mvbkq9dIwW+cF4itCLL/KW++uK9uzk6BOOfPHXwSY3BNAfgCVwfNprSMN28X5/1yKRFjzZNHgUGA5kfSP22FDn84JuupBveivAIcGERRQ==~-1~-1~-1~-1~-1; Domain=.paytm.com; Path=/; Expires=Thu, 08 Apr 2027 23:28:31 GMT; Max-Age=31536000; Secure
bm_sz=9E1E2E8B6ECFB1CA125D89938B992923~YAAQ46s3FxY+vFOdAQAAMhBtbx9E/SfAgOQwz32PvYO1dt+zNWpZ2Bp9tEXckoAZFo+63BqAe+ReG6nH1sZxAYARHpQq6CQhVZIKJ/xE10giJwLVVLBwAwEhXC3cbdPfsd11OObf6zJCZz6S2dhjHlE6biY0lBKaAns0GCkGbkWME0yOSqLlP2fICoriTaPy3EELGY4abmyrWSJXULrw7LIInKquYptss+nX/CoFLdw+QJbBTNr5C8MB+nhDOTJd9/Y1zuo31VZEfVsePESiVCK/Fsvw8aTfYqHv3bouYEEv2EFqY3nPaq3zFXn/2UyoDPx68RaGX3bcHp1byc3OiQfgTkEmPXQbjY1iwQ==~4474182~3422019; Domain=.paytm.com; Path=/; Expires=Thu, 09 Apr 2026 03:28:30 GMT; Max-Age=14399

Other Headers

Date

Other

Wed, 08 Apr 2026 23:28:31 GMT

X-Paytm-Srv-Id

Other

pawssellerphysicalfulfillmentfulfillmentmbnode30187

date: Wed, 08 Apr 2026 23:28:31 GMT
x-paytm-srv-id: pawssellerphysicalfulfillmentfulfillmentmbnode30187

Recommendations

Enable compression (gzip/brotli) to improve performance

Add Cache-Control header to optimize caching

Consider removing X-Powered-By header to hide server technology