| Header Name | Header Data |
|---|---|
| HTTP status code | 200 |
| Expires | Sat, 03 May 2025 03:11:17 GMT |
| X-Frame-Options | SAMEORIGIN |
| Cf-Cache-Status | HIT |
| Cf-Ray | 93951e5eab549705-AMS |
| Date | Fri, 02 May 2025 05:29:02 GMT |
| Connection | keep-alive |
| Content-Security-Policy | font-src *.fontawesome.com https://cdn.checkout.com fonts.gstatic.com cdn.checkout.com script.hotjar.com db.onlinewebfonts.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * affiliates.cdkeys.com tr.snapchat.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com www.cdkeys.com app.storyblok.com 'self'; frame-src bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com https://js.checkout.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * landofcoder.com *.addthis.com *.facebook.com *.twitter.com fp.cdkeys.com ad4m.at widget.trustpilot.com simplicity.trustpilot.com www.facebook.com js.checkout.com embed.twitch.tv accounts.google.com web.facebook.com www.trustpilot.com vars.hotjar.com sandbox-checkout.epag.io checkout.epag.io tr.snapchat.com www.emjcd.com static.criteo.net cj.dotomi.com *.doubleclick.net www.paypalobjects.com unpkg.com optimize.google.com apps.rokt.com wsdk.rokt.com platform.twitter.com ad.ad-srv.net analytics.fatmedia.io *.rfihub.com www.surveymonkey.com shop.spreadshirt.com cdkeys.myspreadshop.com preview.tagging.cdkeys.com tagging.cdkeys.com *.dwin1.com *.awin1.com *.zenaps.com gum.criteo.com c.bing.com the.sciencebehindecommerce.com cdkeys.pxf.io cdkeys.sjv.io app.termly.io 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.addthisedge.com *.twitter.com *.cdkeys.com *.omn-it.net www.gravatar.com steamcdn-a.akamaihd.net *.storyblok.com www.google.tm optimize.google.com *.doubleclick.net ssl.gstatic.com www.gstatic.com www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.com.ai www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.ie www.google.co.il www.google.im www.google.co.in www.google.iq www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.com.kh www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.ms www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.com.ng www.google.com.ni www.google.ne www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.pl www.google.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.so www.google.sm www.google.sr www.google.st www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tl www.google.tn www.google.to www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.vg www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.rs www.google.co.za www.google.co.zm www.google.co.zw www.google.cat *.spreadshirt.com image.spreadshirtmedia.com cdkeys.myspreadshop.com cm.everesttech.net preview.tagging.cdkeys.com tagging.cdkeys.com www.facebook.com static.xx.fbcdn.net alb.reddit.com tr.snapchat.com t.co cw.addthis.com syndication.twitter.com ad.360yield.com *.3lift.com sync.ad-stir.com *.adform.net *.adnxs.com *.adscale.de *.amazon-adsystem.com anymindgroup.go2cloud.org pixel.advertising.com x.bidswitch.net bat.bing.com www.bizrate.com tags.bluekai.com match.bnmla.com r.casalemedia.com usersync.cdglib.com www.chinesean.com *.criteo.com dpm.demdex.net *.dotomi.com sync.e-planning.net secure.getprice.com.au matching.ivitrack.com beacon.krxd.net *.liadm.com contextual.media.net visitor.omnitagjs.com *.openx.net sync.outbrain.com jadserve.postrelease.com *.pubmatic.com idsync.rlcdn.com pixel.rubiconproject.com match.sharethrough.com *.smaato.net *.smartadserver.com *.smartclip.net tg.socdm.com *.stickyadstv.com *.taboola.com pixel.tapad.com criteo-sync.teads.tv s.thebrighttag.com criteo-partners.tremorhub.com *.yahoo.com ad.yieldlab.net ads.yieldmo.com sync-criteo.ads.yieldmo.com lt45.net ds1.net dt51.net ndt5.net fr135.net as.ad4m.at ad.ad-srv.net *.clarity.ms *.dwin1.com *.awin1.com *.zenaps.com gum.criteo.com c.bing.com the.sciencebehindecommerce.com *.loggly.com www.ojrq.net cdkeys.pxf.io cdkeys.sjv.io delight-magento.fly.dev delight-s3-bucket.s3.eu-west-2.amazonaws.com tvspix.com tvpix.com 'self' data: data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com ajax.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ polyfill.io www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com https://cdn.checkout.com *.klarnacdn.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com landofcoder.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.net *.twitter.com widget.surveymonkey.com prodregistryv2.org featureassets.org cdn.jsdelivr.net widget.trustpilot.com invitejs.trustpilot.com connect.facebook.net cdn.checkout.com *.algolia.net embed.twitch.tv *.google.com platform.twitter.com www.google.com www.gstatic.com cdn.simility.com static.hotjar.com script.hotjar.com sandbox-checkout.epag.io checkout.epag.io *.doubleclick.net *.zoho.com *.criteo.net *.criteo.com sc-static.net analytics.twitter.com *.ads-twitter.com *.bing.com www.redditstatic.com maillist-manage.com *.cnnx.io unpkg.com ad4m.at/osij2yav.js optimus.360and1.com www.googleoptimize.com optimize.google.com apps.rokt.com wsdk.rokt.com *.clarity.ms *.cdkeys.com *.omn-it.net c1.rfihub.net a.ad.gt applepay.cdn-apple.com *.spreadshirt.com adtm.spreadshirts.net cdkeys.myspreadshop.com dpm.demdex.net static.zdassets.com/ *.dwin1.com *.awin1.com *.zenaps.com gum.criteo.com c.bing.com the.sciencebehindecommerce.com analytics.fatmedia.io utt.impactcdn.com delight-magento.fly.dev analytics.tiktok.com app.termly.io d2r1yp2w7bby2u.cloudfront.net wzrkt.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com https://cdn.checkout.com unsafe-inline assets.braintreegateway.com cdn.checkout.com maxcdn.bootstrapcdn.com optimize.google.com adtm.spreadshirts.net cdkeys.myspreadshop.com delight-magento.fly.dev *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src cdn.cdkeys.com static.zdassets.com *.dwin1.com *.awin1.com *.zenaps.com gum.criteo.com c.bing.com the.sciencebehindecommerce.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolianet.com *.insights.algolia.io https://maps.googleapis.com https://player.vimeo.com https://js.checkout.com *.klarnaevt.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com landofcoder.com prodregistryv2.org featureassets.org www.facebook.com js.checkout.com *.simility.com graph.facebook.com *.hotjar.com *.hotjar.io wss://*.hotjar.com/api/v2/client/ws *.doubleclick.net freegeoip.app maillist-manage.com invitejs.trustpilot.com bat.bing.com unpkg.com insights.algolia.io *.clarity.ms *.spreadshirt.com cdkeys.myspreadshop.com dpm.demdex.net preview.tagging.cdkeys.com tagging.cdkeys.com static.zdassets.com ekr.zdassets.com cdkeys.zendesk.com widget-mediator.zopim.com wss://widget-mediator.zopim.com *.dwin1.com *.awin1.com *.zenaps.com gum.criteo.com c.bing.com the.sciencebehindecommerce.com cdkeys.pxf.io cdkeys.sjv.io api.delightglobal.io pro.ip-api.com analytics.tiktok.com app.termly.io *.api.termly.io www.redditstatic.com pixel-config.reddit.com conversions-config.reddit.com match.adsrvr.org t.elasticsuite.io *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; |
| Vary | Accept-Encoding |
| Age | 8264 |
| Pragma | cache |
| Cache-Control | no-store, no-cache, must-revalidate, max-age=0 |
| Last-Modified | Fri, 02 May 2025 03:11:18 GMT |
| Server | cloudflare |
| Content-Type | text/html; charset=UTF-8 |
| X-Content-Type-Options | nosniff |
| X-Xss-Protection | 1; mode=block |
By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.
This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.
We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.
Watch it now at TrustRadar