HTTP Headers Analysis for https://paytpv.com

SSL Verification Bypassed

The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.

Reason:

Hostname Mismatch - certificate is issued for *.sec.paycomet.com, not for paytpv.com

Open Cached · just now

11 Headers

Detected Technologies from Headers

See all in URL Inspect 1

Nginx

HTTP Security Headers

Status

Strict-Transport-Security

Present

max-age=7776000

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Increase HSTS max-age to at least 1 year and add includeSubDomains
• Add Content-Security-Policy header to prevent XSS attacks
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

connection: close

Caching Headers

Cache-Control

Caching

no-cache, private

cache-control: no-cache, private

Content Headers

Content-Length

Content

61378

Content-Type

Content

text/html; charset=UTF-8

content-length: 61378
content-type: text/html; charset=UTF-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

set-cookie: AWSALB=fe/5A0mtymoSZbR686vxfwxqQEEKR8kzRT2QTIbFPdRKKn6wPyKbdpEfNlfcHCUDpONK4rNzrcFFEsrjkD2p+WS59+zfQ/PnHsKymoI/bMPsWI4g2vCXmxggBbng; Expires=Tue, 03 Mar 2026 14:02:25 GMT; Path=/
AWSALBCORS=fe/5A0mtymoSZbR686vxfwxqQEEKR8kzRT2QTIbFPdRKKn6wPyKbdpEfNlfcHCUDpONK4rNzrcFFEsrjkD2p+WS59+zfQ/PnHsKymoI/bMPsWI4g2vCXmxggBbng; Expires=Tue, 03 Mar 2026 14:02:25 GMT; Path=/; SameSite=None; Secure
XSRF-TOKEN=eyJpdiI6InFLU1hvdmpLb09XOVpvTVVJZHM3N2c9PSIsInZhbHVlIjoiU1BFeDJpUnJleDdJdFV6TEIwZXBlNThUdjhXeVJnZzBseTFjNHNtY0hCbXhrMy84NzBRNnBpMHE2SXhiN0FUVmJQbGprT0pmNWpLNkU5OEF1SjlKNzNIQThFNHdudVlGKytSL2R3dmx1bkVycXpKYklLWW50NlNvWjJLYzNodnMiLCJtYWMiOiJkMGM4MzAyNzY3MjRlZWRkMmM4ZDhlZjNiMDczMjdkMDU3NDU4MjMyYzhkYmNhNTdiZDY1MmU3OWQ3ZTc3NDU1IiwidGFnIjoiIn0%3D; expires=Tue, 24-Feb-2026 16:02:25 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6IlRRbTZKOVpoMGdaU0pyS2R6Z0JBN0E9PSIsInZhbHVlIjoiZ3gzK2k0QytBdDVIY3d2YWZzZUlxQXFHbzBCUi9XcmZUZzNySXV6Um40OW02YVFyd1JnR2UyeGxuZ1FGRXdEclYwdnVkVDQrcGxxTUdVVldXaVVzNEtYa0dWNnprWHVQTjdPdkdlWHMwbEQrQVNpbGhpRnpXTStqdjUyK3BjZ0IiLCJtYWMiOiI4ZmZjYzY3NzM5ZGU0ODU2YWExNzM5NjhiNzI4Mjk2M2YzMjgxZWY1ZWZkNjc2YTk5OTc4MWRhMDU1NmJhM2JjIiwidGFnIjoiIn0%3D; expires=Tue, 24-Feb-2026 16:02:25 GMT; Max-Age=7200; path=/; httponly; samesite=lax
XcIqHSkyLfVCyTqxtAkSDcj2eqb16dx9UnNLJlsV=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; expires=Tue, 24-Feb-2026 16:02:25 GMT; Max-Age=7200; path=/; httponly; samesite=lax
cookiesession1=678A3E1EBE194108DF6E1D7F9E1E8718;Expires=Wed, 24 Feb 2027 14:02:25 GMT;Path=/;Secure;HttpOnly

Other Headers

Date

Other

Tue, 24 Feb 2026 14:02:25 GMT

date: Tue, 24 Feb 2026 14:02:25 GMT

Recommendations

Enable compression (gzip/brotli) to improve performance