HTTP Headers Analysis for https://trackmy.tech

Detected Technologies from Headers

See all in URL Inspect 3

AWS CloudFront

Nginx

PHP

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Strong

default-src; script-src; object-src Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

accelerometer=(), autoplay=(), camera=(); +8 more

Performance Headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding

connection: close
transfer-encoding: chunked
vary: Accept-Encoding

Caching Headers

Cache-Control

Caching

no-cache, private

cache-control: no-cache, private

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

Server

nginx/1.29.8

X-Powered-By

Server

PHP/8.4.19

server: nginx/1.29.8
x-powered-by: PHP/8.4.19

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: XSRF-TOKEN=eyJpdiI6IklnWThmcEhYYUY5SnZmZnBYT0c4U3c9PSIsInZhbHVlIjoiRXNZTDk3L0UwNUpjZFFscllZSEZXTlkrbUVsNmRPYjh1Q1lBQ3QyQ3RadUhSdHVvYUwwdmpvWU0zRmE4YmRCelZvc1BsZVY4TFdaVUk0ZmZpSjdRWHlDN0c2TVJGU2wrVWozQXUvMCtlR3Fjbjd0K3dySlJpWnpyc3hUQWNYTTIiLCJtYWMiOiIxNTUzNzg4MzFhOTA1ODg1YTgxNmE4YzFiOWE3ZGIzNzQ3OTU4Y2Q5ZDQ5Yzg5M2EyMmFmNTM1MDEyNWVmOGMwIiwidGFnIjoiIn0%3D; expires=Tue, 12-May-2026 05:18:43 GMT; Max-Age=7200; path=/; samesite=lax
servicefusion_session=eyJpdiI6IktlWGJjM0IxNG10U0VmQUw1RWcraXc9PSIsInZhbHVlIjoiQmV6V2tQK1lmbUIxYUtrRmYzR054OTFtdDJnVk9kV1U2YnQyM081dkZhamtpR1Y1TGdCRnFUcTBNVzZFYnM5dFAvRFNSUmt6RkQ4andQVldvbGVsWmFzalE4R3JpUVcvNGRTYzBLZ1c1b2V3NmFvQkIwclp5U2tobGhNalZQVGciLCJtYWMiOiJkMWY5Y2ZlZjE0ODVjMjBlZjY1MmY0YmQzYWNmYzgyZWJhMTZiYTFhOWFlMzFiMGVlZmU4Njk3MDM1ZTk0NThkIiwidGFnIjoiIn0%3D; expires=Tue, 12-May-2026 05:18:43 GMT; Max-Age=7200; path=/; httponly; samesite=lax

Other Headers

Date

Other

Tue, 12 May 2026 03:18:43 GMT

Via

Other

1.1 5840e9664aef77d9be1f708259e60d56.cloudfront.net (CloudFront)

X-Amz-Cf-Id

Other

FqgxCcVfOIwBC8UdWFwFt9twFOlAJAJHEjqpgJrggySQJUTpJa13eA==

X-Amz-Cf-Pop

Other

IAD89-P2

X-Application-Version

Other

ee69ba8

X-Build-Date

Other

Thu Apr 30 12:04:50 UTC 2026

X-Cache

Other

Miss from cloudfront

X-Permitted-Cross-Domain-Policies

Other

none

date: Tue, 12 May 2026 03:18:43 GMT
via: 1.1 5840e9664aef77d9be1f708259e60d56.cloudfront.net (CloudFront)
x-amz-cf-id: FqgxCcVfOIwBC8UdWFwFt9twFOlAJAJHEjqpgJrggySQJUTpJa13eA==
x-amz-cf-pop: IAD89-P2
x-application-version: ee69ba8
x-build-date: Thu Apr 30 12:04:50 UTC 2026
x-cache: Miss from cloudfront
x-permitted-cross-domain-policies: none

Recommendations

Enable compression (gzip/brotli) to improve performance

Consider removing X-Powered-By header to hide server technology