depop.com | Analytics by SecurityHeaders

HTTP Headers report for depop.com

Header Name Header Data
HTTP status code 200
Origin-Agent-Cluster ?1
Cache-Control private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Strict-Transport-Security max-age=31536000; includeSubDomains; preload
X-Clacks-Overhead GNU Terry Pratchett
Date Sun, 06 Apr 2025 13:23:52 GMT
Cross-Origin-Embedder-Policy require-corp
Content-Type text/html; charset=UTF-8
Permissions-Policy accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
X-Frame-Options SAMEORIGIN
Vary Accept-Encoding
Cf-Ray 92c19a2cb8f55811-AMS
Accept-Ch Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cf-Mitigated challenge
Referrer-Policy same-origin
Cf-Chl-Out a2WSv35AUHy9gC03nzpvLoKZCGzo+6NXHO5vfq9olOfbEMRfLwvuwmneRBNX0xU4tBHnnP2efaacS6SIQIir/aeZGGhbYvYLCCr27XGrQv9TBnFcppXWdcS9+mWD3A/0i4GO+qGRXmLbPeLhBjxYQg==$/j/jVQpWmkMNeA/CeFe9Xg==
Cross-Origin-Opener-Policy same-origin
Server cloudflare
Server-Timing chlray;desc="92c19a2cb8f55811"
Set-Cookie __cf_bm=5y8pUmTvvOC8RyugJOtUgL_E3FcvoyzZhdRmgZGJxHY-1743945832-1.0.1.1-VEvLItCfq_AUU_l9r6S0D__cdW3RwT.Pbr56vd4S3N2gAKNe.JKKMnQ5TSEtELDfOneLtw8.R.jTmkXI.tlTbIOtd10YCd89_.gO7cQKaVE; path=/; expires=Sun, 06-Apr-25 13:53:52 GMT; domain=.www.depop.com; HttpOnly; Secure; SameSite=None
Cross-Origin-Resource-Policy same-origin
X-Content-Options nosniff
Expires Thu, 01 Jan 1970 00:00:01 GMT
Alt-Svc h3=":443"; ma=86400
Critical-Ch Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA

About the tool

By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.

This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.

We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.

Watch it now at TrustRadar