HTTP Headers Analysis for https://onnitamazon.com

Detected Technologies from Headers

See all in URL Inspect 2

AWS CloudFront

Amazon S3

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=47474747; includeSubDomains; preload

Content-Security-Policy

Weak

upgrade-insecure-requests; report-uri Analyze

Content-Security-Policy-Report-Only

Basic

default-src; report-uri Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

Content-Encoding

Performance

gzip

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding,User-Agent

connection: close
content-encoding: gzip
transfer-encoding: chunked
vary: Accept-Encoding,User-Agent

Caching Headers

Cache-Control

Caching

no-cache, no-transform

Expires

Caching

-1

Pragma

Caching

no-cache

cache-control: no-cache, no-transform
expires: -1
pragma: no-cache

Content Headers

Content-Encoding

Content

gzip

Content-Language

Content

en-US

Content-Type

Content

text/html;charset=UTF-8

content-encoding: gzip
content-language: en-US
content-type: text/html;charset=UTF-8

Server Headers

Server

server: Server

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: session-id=143-6948510-8550202; Domain=.amazon.com; Expires=Fri, 11-Jun-2027 23:55:14 GMT; Path=/; Secure
session-id-time=2082787201l; Domain=.amazon.com; Expires=Fri, 11-Jun-2027 23:55:14 GMT; Path=/; Secure
i18n-prefs=USD; Domain=.amazon.com; Expires=Fri, 11-Jun-2027 23:55:14 GMT; Path=/
lc-main=en_US; Domain=.amazon.com; Expires=Fri, 11-Jun-2027 23:55:14 GMT; Path=/
skin=noskin; path=/; domain=.amazon.com

Other Headers

Accept-Ch

Other

ect,rtt,downlink,device-memory,sec-ch-device-memory,viewport-width,sec-ch-viewport-width,dpr,sec-ch-dpr,sec-ch-ua-full-version-list,viewport-height,sec-ch-viewport-height,sec-ch-ua-platform,sec-ch-ua-platform-version

Accept-Ch-Lifetime

Other

86400

Alt-Svc

Other

h3=":443"; ma=86400

Date

Other

Thu, 11 Jun 2026 23:55:14 GMT

Via

Other

1.1 75171afe872c03bf51fccd69b0862020.cloudfront.net (CloudFront)

X-Amz-Cf-Id

Other

AIJCWEItmifoZY9gHTDLP6tDLU7XzsD3x_IXtRba01BB3EuF8tcd0Q==

X-Amz-Cf-Pop

Other

IAD55-P10

X-Amz-Rid

Other

QC5FF87R0NYZD38NXSCG

X-Cache

Other

Miss from cloudfront

X-Ua-Compatible

Other

IE=edge

accept-ch: ect,rtt,downlink,device-memory,sec-ch-device-memory,viewport-width,sec-ch-viewport-width,dpr,sec-ch-dpr,sec-ch-ua-full-version-list,viewport-height,sec-ch-viewport-height,sec-ch-ua-platform,sec-ch-ua-platform-version
accept-ch-lifetime: 86400
alt-svc: h3=":443"; ma=86400
date: Thu, 11 Jun 2026 23:55:14 GMT
via: 1.1 75171afe872c03bf51fccd69b0862020.cloudfront.net (CloudFront)
x-amz-cf-id: AIJCWEItmifoZY9gHTDLP6tDLU7XzsD3x_IXtRba01BB3EuF8tcd0Q==
x-amz-cf-pop: IAD55-P10
x-amz-rid: QC5FF87R0NYZD38NXSCG
x-cache: Miss from cloudfront
x-ua-compatible: IE=edge

Recommendations

No recommendations at this time