| Header Name | Header Data |
|---|---|
| HTTP status code | 200 |
| Vary | Accept-Encoding |
| Access-Control-Allow-Methods | GET |
| Access-Control-Allow-Credentials | true |
| Access-Control-Allow-Headers | X-Requested-With, origin, content-type, accept |
| Server-Timing | dtSInfo;desc="0", dtRpid;desc="-2049839071" |
| Pragma | no-cache |
| Content-Security-Policy | default-src 'self' 'unsafe-inline' 'unsafe-eval' optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com *.ravelin.click *.youtube-nocookie.com *.zip.co *.gstatic.com *.google.com.mx *.optimizely.com *.iesnare.com *.polariscvc.com *.polarisapi.com *.ctfassets.net *.reddit.com *.redditstatic.com *.arinet.com *.firstdata.com d79i1fxsrar4t.cloudfront.net display.ugc.bazaarvoice.com *.trkn.us *.paypalobjects.com *.bazaarvoice.com *.twitter.com *.ads-twitter.com *.kampyle.com t.co *.sharethis.com *.cdninstagram.com unpkg.com *.quadpay.com *.kenect.com bam.nr-data.net *.newrelic.com *.googleapis.com browser-update.org bit.ly *.trustarc.com *.googleapis.com *.conversionlogic.net *.commander1.com google.com *.fitnesspark.fr *.bnmla.com *.acxiomapac.com *.demdex.net *.webmd.com thrtle.com *.inu.la *.totaljobs.com *.swoop.com *.swpsvc.com *.y-medialink.com *.owneriq.net *.crsspxl.com *.thebrighttag.com *.ispot.tv app.link *.postrelease.com *.mmsho.com trkn.us *.narrative.io *.criteo.com *.taboola.com *.media6degrees.com *.tidaltv.com *.rezync.com *.rfihub.com *.liadm.com *.pippio.com *.company-target.com *.youtube.com *.mdhv.io *.tapad.com *.azureedge.net wss://*.hotjar.com *.azurefd.net *.dotomi.com *.sitescout.com *.truefitcorp.com *.bidr.io *.w55c.net *.mathtag.com *.adform.net *.ipredictive.com *.everesttech.net wss://*.hotjar.com *.fwmrm.net *.bidswitch.net *.turn.com *.bing.com *.visualstudio.com *.windows.net *.msecnd.net *.connexity.net *.alcmpn.com *.alocdn.com *.fwmrm.net *.addthis.com *.opendns.com *.cloudflare.com *.dotomi.com *.xspadvertising.com *.acuityplatform.com *.adgrx.com *.adsrvr.org *.pro-market.net *.openx.net *.rubiconproject.com *.contextweb.com *.adnxs.com *.spotxchange.com *.rlcdn.com *.lijit.com *.crwdcntrl.net *.bluekai.com *.bfmio.com *.yahoo.com *.exelator.com *.stickyadstv.com *.pubmatic.com *.intentiq.com *.advertising.com *.agkn.com *.tremorhub.com *.contentsquare.com *.simpli.fi *.google.com *.episerver.net blob: *.contentsquare.net service.opticalanalytics.io *.smartystreets.com *.vantivcnp.com i.ytimg.com ajax.googleapis.com cdn.auth0.com *.polaris.com cloudfront.loggly.com connect.facebook.net fonts.googleapis.com fonts.gstatic.com polaris-tagging-prod.azureedge.net polaris-tagging-tagserver-prod.azurewebsites.net s.ytimg.com *.hotjar.com *.hotjar.io www.facebook.com region1.google-analytics.com *.google-analytics.com www.google-analytics.com www.google.fr www.googleadservices.com www.googletagmanager.com *.googletagmanager.com www.youtube.com servedby.flashtalking.com data: logs-01.loggly.com login.dotomi.com maps.googleapis.com *.doubleclick.net cdn.jsdelivr.net maps.gstatic.com *.buzzsprout.com *.livechatinc.com *.google.fr *.google.es *.google.pt *.google.co.uk *.google.ch *.google.no *.google.fi *.goole.au *.google.co.nz *.google.ie *.google.se *.google.de *.google.at *.matomo.cloud *.privacymanager.io api.rlcdn.com *.decibelinsight.net wss://collection.decibelinsight.net *optimizelyedit.com octane.co *.octane.co; |
| Cf-Cache-Status | DYNAMIC |
| Connection | keep-alive |
| Set-Cookie | AWSALB=EPBrcwUbgnqLmfotzrIFcn13uoiHEiyuTCrmIIOWt2CbCJgu4/QBpGPw/vsmX/UKmTCQxufKVJZfwRDQStHQesoY+hsXglZaCCTCexsEkpdgrGLc2aawIbQby7UO; Expires=Sat, 26 Apr 2025 04:40:42 GMT; Path=/ |
| Access-Control-Allow-Origin | * |
| X-Ruxit-Js-Agent | true |
| X-Frame-Options | SAMEORIGIN |
| X-Content-Type-Options | nosniff |
| Cf-Ray | 9329b9b29b1ddef8-AMS |
| Date | Sat, 19 Apr 2025 04:40:42 GMT |
| Content-Type | text/html; charset=utf-8 |
| Cache-Control | no-cache, no-store |
| X-Correlation-Id | 21b74100-36f9-4c0f-b6c2-289c14c200a8 |
| X-Oneagent-Js-Injection | true |
| X-Xss-Protection | 1; mode=block |
| Strict-Transport-Security | max-age=31536000; includeSubDomains |
| Server | cloudflare |
By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.
This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.
We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.
Watch it now at TrustRadar