HTTP Headers Analysis for https://support.payrix.com

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

accelerometer=(), ambient-light-sensor=(), autoplay=(*), camera=(*), clipboard-write=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(*), midi=(), payment=(), usb=(), fullscreen=(*)

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Content-Type-Options: nosniff

Performance Headers

3 headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

Caching Headers

2 headers

Cache-Control

Caching

public, max-age=0, stale-while-revalidate=300, stale-if-error=60

Etag

Caching

W/"53545-IMVKk7ZftxzCqC97w7qRpLCYvAg"

Content Headers

1 headers

Content-Type

Content

text/html; charset=utf-8

Server Headers

1 headers

Server

cloudflare

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

Cookies

__cf_bm=3L4whEr3Qb6v4aD.sU78JlK4TgJ2joXVC86MlHPRjEw-1767270450.372562-1.0.1.1-AcZIsmo.Yop2bbL9wMSmNO7Y3TcGwWH2BVpUpjxhN3P_inUyWSMsOM8rDT1PjVFXZfzrbb2lzukJ18X4xHTNcHRyObI8t3JcmQ0hSy73u935bAAEfB1Z8CoMV2xTXvMw; HttpOnly; Secure; Path=/; Domain=us.document360.io; Expires=Thu, 01 Jan 2026 12:57:31 GMT