HTTP Headers Analysis for https://worldpay.egain.cloud

Detected Technologies from Headers

See all in URL Inspect 2

AWS

AWS API Gateway

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Weak

frame-ancestors Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Significantly strengthen CSP directives
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

no-cache

Expires

Caching

Thu, 01 Jan 1970 00:00:00 GMT

Pragma

Caching

no-cache

cache-control: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
pragma: no-cache

Content Headers

Content-Length

Content

191

Content-Type

Content

text/html;charset=utf-8

content-length: 191
content-type: text/html;charset=utf-8

Server Headers

Server

server: Server

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: AWSALBTG=XRcSRtzh7vON+K2kWQmYS3y2hlodjYiBknCKGdTT277psYjOlWu54mZxlnxc6saTWwbG5DdSW3xIqYED1jnUdkwlgn8nTmSdIJWSyus5boh4XHDi6gix1JwrGFQ2UXPFvmPn3axzXlItQebyTHpbz3YueelBToqMLvAdFjvBXkM7bcqeN/s=; Expires=Mon, 06 Apr 2026 08:11:19 GMT; Path=/
AWSALBTGCORS=XRcSRtzh7vON+K2kWQmYS3y2hlodjYiBknCKGdTT277psYjOlWu54mZxlnxc6saTWwbG5DdSW3xIqYED1jnUdkwlgn8nTmSdIJWSyus5boh4XHDi6gix1JwrGFQ2UXPFvmPn3axzXlItQebyTHpbz3YueelBToqMLvAdFjvBXkM7bcqeN/s=; Expires=Mon, 06 Apr 2026 08:11:19 GMT; Path=/; SameSite=None; Secure
AWSALB=cRQ+QONI937ePOeZPQNhZrW/Df03stEQ8nVpKoRBwSaoiTTHrGtS1L8W8Lweg+XIwFdk4la2IXmLHBdhLljE8NKBZAGU8LZFBWxM55j/Uk/iwd0zfGxyRFkJNRu3; Expires=Mon, 06 Apr 2026 08:11:19 GMT; Path=/
AWSALBCORS=cRQ+QONI937ePOeZPQNhZrW/Df03stEQ8nVpKoRBwSaoiTTHrGtS1L8W8Lweg+XIwFdk4la2IXmLHBdhLljE8NKBZAGU8LZFBWxM55j/Uk/iwd0zfGxyRFkJNRu3; Expires=Mon, 06 Apr 2026 08:11:19 GMT; Path=/; SameSite=None; Secure
JSESSIONID=node01jwfkovwd0g4g14pa759ubdtmj108027.node0; Path=/system; Secure; HttpOnly; SameSite=None

Other Headers

Date

Other

Mon, 30 Mar 2026 08:11:19 GMT

X-Amz-Apigw-Id

Other

bBx2NG6lPHcFfBQ=

X-Amzn-Remapped-Connection

Other

keep-alive

X-Amzn-Remapped-Content-Length

Other

191

X-Amzn-Remapped-Date

Other

Mon, 30 Mar 2026 08:11:19 GMT

X-Amzn-Requestid

Other

6100a026-1c04-4f48-9310-53e423d48e23

X-Ua-Compatible

Other

IE=EmulateIE9

date: Mon, 30 Mar 2026 08:11:19 GMT
x-amz-apigw-id: bBx2NG6lPHcFfBQ=
x-amzn-remapped-connection: keep-alive
x-amzn-remapped-content-length: 191
x-amzn-remapped-date: Mon, 30 Mar 2026 08:11:19 GMT
x-amzn-requestid: 6100a026-1c04-4f48-9310-53e423d48e23
x-ua-compatible: IE=EmulateIE9

Recommendations

Enable compression (gzip/brotli) to improve performance