| Header Name | Header Data |
|---|---|
| HTTP status code | 200 |
| Connection | keep-alive |
| X-Response-Time-Ms | 18 |
| X-Xss-Protection | 1; mode=block |
| X-Cache | Miss from cloudfront |
| Cf-Cache-Status | DYNAMIC |
| Content-Type | text/html; charset=utf-8 |
| Set-Cookie | ft_city_id=38044; expires=Fri, 31 Dec 9999 21:59:59 GMT; path=/; secure; samesite=lax; httponly |
| Permissions-Policy | accelerometer=(), camera=(self), gyroscope=(), magnetometer=(), usb=() |
| Vary | Accept-Encoding |
| Via | 1.1 bdba42cf1410fb617eeb4ffd3e0b9cb6.cloudfront.net (CloudFront) |
| X-Amz-Cf-Pop | AMS1-C1 |
| Strict-Transport-Security | max-age=31536000; includeSubDomains; preload; |
| Server | cloudflare |
| Cf-Ray | 932e4e976ca69ff4-AMS |
| X-Amz-Cf-Id | vRcRkoDoRPw0KCJWYr0tFLMkZGS2FaqPDbB2s8iNv-jJVdFY6wKPWQ== |
| Date | Sat, 19 Apr 2025 18:01:24 GMT |
| X-Content-Type-Options | nosniff |
| Content-Security-Policy | frame-ancestors 'self' youtube.googleapis.com www.youtube.com; default-src 'self' data: https:; manifest-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: gcdn.tranzzo.com youtube.googleapis.com www.foxtrot.com.ua wss://rtc-cloud-eu1.bitrix.info rtc-cloud-eu1.bitrix.info widget.eu.criteo.com www.google.com.ua *.google.com www.facebook.com paypartslimit.privatbank.ua *.google-analytics.com www.googleadservices.com www.googletagmanager.com socauth.privatbank.ua www.gstatic.com code.jquery.com cdn.jsdelivr.net connect.facebook.net esputnik.com static.criteo.net sslwidget.criteo.com script.softcube.com googleads.g.doubleclick.net maps.googleapis.com giftmall.com.ua bitrix.samsung.ua www.giveaway.foxtrot.com.ua cdn.admitad.com z.lenmit.com *.esputnik.com a4p.adpartner.pro a.mgid.com cm.mgid.com servereu.eyezon.online static.cloudflareinsights.com media.flixcar.com media.flixfacts.com logo.flixfacts.co.uk media.flixsyndication.net t.flix360.com syndication.flix360.com content.jwplatform.com assets-jpcust.jwpsrv.com ssl.p.jwpcdn.com *.cloudfront.net media.pointandplace.com player.pointandplace.com t.pointandplace.com *.flix360.com *.flix360.io dev-origin.flixsyndication.net dev-delivery.flix360.com measurement-api.criteo.com static.hotjar.com google-analytics.bi.owox.com script.hotjar.com api.tdl.com.ua ajax.googleapis.com static.opentok.com static.hotjar.com wss://*.tokbox.com wss://*.opentok.com api.soc.business *.hotjar.com *.hotjar.io wss://*.hotjar.com *.tokbox.com *.opentok.com *.googlesyndication.com foxtrot-api.evinent.site *.foxtrot.com.ua widget-samsung.kwizbot.io tags.creativecdn.com ams.creativecdn.com push.esputnik.com region1.analytics.google.com *.kwizbot.io *.monolytics.app wss://*.monolytics.app *.nr-data.net foxtrot.com.ua *.clarity.ms;connect-src 'self' blob: widget.tranzzo.com youtube.googleapis.com www.foxtrot.com.ua wss://rtc-cloud-eu1.bitrix.info rtc-cloud-eu1.bitrix.info widget.eu.criteo.com www.google.com.ua *.google.com www.facebook.com paypartslimit.privatbank.ua api.foxtrot.evinent.site foxtrot-api.search.evinent.site tracker.softcube.com *.google-analytics.com sslwidget.criteo.com stats.g.doubleclick.net ai.softcube.com recom.softcube.com bitrix.samsung.ua giveaway.foxtrot.com.ua *.esputnik.com esputnik.com storage.googleapis.com servereu.eyezon.online wss://servereu.eyezon.online wss://wsseu.eyezon.online recordseu.eyezon.online cloudflareinsights.com *.google.com maps.googleapis.com wss://bitrix.samsung.ua media.flixcar.com media.flixfacts.com logo.flixfacts.co.uk media.flixsyndication.net t.flix360.com syndication.flix360.com content.jwplatform.com assets-jpcust.jwpsrv.com ssl.p.jwpcdn.com *.cloudfront.net media.pointandplace.com player.pointandplace.com t.pointandplace.com *.flix360.com *.flix360.io dev-origin.flixsyndication.net dev-delivery.flix360.com measurement-api.criteo.com static.hotjar.com google-analytics.bi.owox.com script.hotjar.com api.tdl.com.ua static.hotjar.com wss://*.tokbox.com wss://*.opentok.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.tokbox.com *.opentok.com api.soc.business *.googlesyndication.com foxtrot-api.evinent.site *.foxtrot.com.ua socket-samsung.kwizbot.io searchapi.samsung.com shop.samsung.com ams.creativecdn.com tags.creativecdn.com push.esputnik.com region1.analytics.google.com *.kwizbot.io wss://*.kwizbot.io api.ipify *.monolytics.app wss://*.monolytics.app *.nr-data.net foxtrot.com.ua *.clarity.ms; img-src * 'self' data: https: blob:; style-src 'self' 'unsafe-inline' blob: storage.googleapis.com www.foxtrot.com.ua i2.foxtrot.com.ua files.foxtrot.com.ua fonts.googleapis.com bitrix.samsung.ua macaroncms.s3.eu-central-1.amazonaws.com *.google.com media.flixcar.com media.flixfacts.com logo.flixfacts.co.uk media.flixsyndication.net t.flix360.com syndication.flix360.com content.jwplatform.com assets-jpcust.jwpsrv.com ssl.p.jwpcdn.com *.cloudfront.net media.pointandplace.com player.pointandplace.com t.pointandplace.com *.flix360.com *.flix360.io dev-origin.flixsyndication.net dev-delivery.flix360.com static.hotjar.com google-analytics.bi.owox.com api.tdl.com.ua wss://*.tokbox.com wss://*.opentok.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.tokbox.com *.opentok.com api.soc.business foxtrot-api.evinent.site widget-samsung.kwizbot.io push.esputnik.com *.kwizbot.io; font-src 'self' www.foxtrot.com.ua fonts.gstatic.com i2.foxtrot.com.ua storage.googleapis.com files.foxtrot.com.ua media.flixcar.com media.flixfacts.com logo.flixfacts.co.uk media.flixsyndication.net t.flix360.com syndication.flix360.com content.jwplatform.com assets-jpcust.jwpsrv.com ssl.p.jwpcdn.com *.cloudfront.net media.pointandplace.com player.pointandplace.com t.pointandplace.com *.flix360.com *.flix360.io dev-origin.flixsyndication.net dev-delivery.flix360.com *.kwizbot.io data: |
| Referrer-Policy | no-referrer-when-downgrade |
| Feature-Policy | accelerometer 'none'; camera 'self'; gyroscope 'none'; magnetometer 'none'; usb 'none' |
| Alt-Svc | h3=":443"; ma=86400 |
By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.
This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.
We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.
Watch it now at TrustRadar