| Header Name | Header Data |
|---|---|
| HTTP status code | 200 |
| Access-Control-Allow-Headers | * |
| Referrer-Policy | strict-origin-when-cross-origin |
| Last-Modified | Mon, 14 Apr 2025 17:44:42 GMT |
| Access-Control-Allow-Credentials | false |
| Access-Control-Allow-Methods | GET, POST, HEAD |
| X-Content-Type-Options | nosniff |
| Content-Type | text/html |
| Connection | keep-alive |
| Access-Control-Expose-Headers | * |
| Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://*.google-analytics.com https://*.hotjar.com https://*.stape.io https://*.osano.com https://connect.facebook.net https://*.hsforms.com https://js.hsforms.net https://scripts.simpleanalyticscdn.com https://plausible.io https://static.ads-twitter.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.googletagmanager.com; img-src 'self' data: https://cdn.sanity.io https://www.google.com/pagead/* https://www.google.com/pagead/* https://www.google.ad/pagead/* https://www.google.ae/pagead/* https://www.google.com.af/pagead/* https://www.google.com.ag/pagead/* https://www.google.al/pagead/* https://www.google.am/pagead/* https://www.google.co.ao/pagead/* https://www.google.com.ar/pagead/* https://www.google.as/pagead/* https://www.google.at/pagead/* https://www.google.com.au/pagead/* https://www.google.az/pagead/* https://www.google.ba/pagead/* https://www.google.com.bd/pagead/* https://www.google.be/pagead/* https://www.google.bf/pagead/* https://www.google.bg/pagead/* https://www.google.com.bh/pagead/* https://www.google.bi/pagead/* https://www.google.bj/pagead/* https://www.google.com.bn/pagead/* https://www.google.com.bo/pagead/* https://www.google.com.br/pagead/* https://www.google.bs/pagead/* https://www.google.bt/pagead/* https://www.google.co.bw/pagead/* https://www.google.by/pagead/* https://www.google.com.bz/pagead/* https://www.google.ca/pagead/* https://www.google.cd/pagead/* https://www.google.cf/pagead/* https://www.google.cg/pagead/* https://www.google.ch/pagead/* https://www.google.ci/pagead/* https://www.google.co.ck/pagead/* https://www.google.cl/pagead/* https://www.google.cm/pagead/* https://www.google.cn/pagead/* https://www.google.com.co/pagead/* https://www.google.co.cr/pagead/* https://www.google.com.cu/pagead/* https://www.google.cv/pagead/* https://www.google.com.cy/pagead/* https://www.google.cz/pagead/* https://www.google.de/pagead/* https://www.google.dj/pagead/* https://www.google.dk/pagead/* https://www.google.dm/pagead/* https://www.google.com.do/pagead/* https://www.google.dz/pagead/* https://www.google.com.ec/pagead/* https://www.google.ee/pagead/* https://www.google.com.eg/pagead/* https://www.google.es/pagead/* https://www.google.com.et/pagead/* https://www.google.fi/pagead/* https://www.google.com.fj/pagead/* https://www.google.fm/pagead/* https://www.google.fr/pagead/* https://www.google.ga/pagead/* https://www.google.ge/pagead/* https://www.google.gg/pagead/* https://www.google.com.gh/pagead/* https://www.google.com.gi/pagead/* https://www.google.gl/pagead/* https://www.google.gm/pagead/* https://www.google.gr/pagead/* https://www.google.com.gt/pagead/* https://www.google.gy/pagead/* https://www.google.com.hk/pagead/* https://www.google.hn/pagead/* https://www.google.hr/pagead/* https://www.google.ht/pagead/* https://www.google.hu/pagead/* https://www.google.co.id/pagead/* https://www.google.ie/pagead/* https://www.google.co.il/pagead/* https://www.google.im/pagead/* https://www.google.co.in/pagead/* https://www.google.iq/pagead/* https://www.google.is/pagead/* https://www.google.it/pagead/* https://www.google.je/pagead/* https://www.google.com.jm/pagead/* https://www.google.jo/pagead/* https://www.google.co.jp/pagead/* https://www.google.co.ke/pagead/* https://www.google.com.kh/pagead/* https://www.google.ki/pagead/* https://www.google.kg/pagead/* https://www.google.co.kr/pagead/* https://www.google.com.kw/pagead/* https://www.google.kz/pagead/* https://www.google.la/pagead/* https://www.google.com.lb/pagead/* https://www.google.li/pagead/* https://www.google.lk/pagead/* https://www.google.co.ls/pagead/* https://www.google.lt/pagead/* https://www.google.lu/pagead/* https://www.google.lv/pagead/* https://www.google.com.ly/pagead/* https://www.google.co.ma/pagead/* https://www.google.md/pagead/* https://www.google.me/pagead/* https://www.google.mg/pagead/* https://www.google.mk/pagead/* https://www.google.ml/pagead/* https://www.google.com.mm/pagead/* https://www.google.mn/pagead/* https://www.google.com.mt/pagead/* https://www.google.mu/pagead/* https://www.google.mv/pagead/* https://www.google.mw/pagead/* https://www.google.com.mx/pagead/* https://www.google.com.my/pagead/* https://www.google.co.mz/pagead/* https://www.google.com.na/pagead/* https://www.google.com.ng/pagead/* https://www.google.com.ni/pagead/* https://www.google.ne/pagead/* https://www.google.nl/pagead/* https://www.google.no/pagead/* https://www.google.com.np/pagead/* https://www.google.nr/pagead/* https://www.google.nu/pagead/* https://www.google.co.nz/pagead/* https://www.google.com.om/pagead/* https://www.google.com.pa/pagead/* https://www.google.com.pe/pagead/* https://www.google.com.pg/pagead/* https://www.google.com.ph/pagead/* https://www.google.com.pk/pagead/* https://www.google.pl/pagead/* https://www.google.pn/pagead/* https://www.google.com.pr/pagead/* https://www.google.ps/pagead/* https://www.google.pt/pagead/* https://www.google.com.py/pagead/* https://www.google.com.qa/pagead/* https://www.google.ro/pagead/* https://www.google.ru/pagead/* https://www.google.rw/pagead/* https://www.google.com.sa/pagead/* https://www.google.com.sb/pagead/* https://www.google.sc/pagead/* https://www.google.se/pagead/* https://www.google.com.sg/pagead/* https://www.google.sh/pagead/* https://www.google.si/pagead/* https://www.google.sk/pagead/* https://www.google.com.sl/pagead/* https://www.google.sn/pagead/* https://www.google.so/pagead/* https://www.google.sm/pagead/* https://www.google.sr/pagead/* https://www.google.st/pagead/* https://www.google.com.sv/pagead/* https://www.google.td/pagead/* https://www.google.tg/pagead/* https://www.google.co.th/pagead/* https://www.google.com.tj/pagead/* https://www.google.tl/pagead/* https://www.google.tm/pagead/* https://www.google.tn/pagead/* https://www.google.to/pagead/* https://www.google.com.tr/pagead/* https://www.google.tt/pagead/* https://www.google.com.tw/pagead/* https://www.google.co.tz/pagead/* https://www.google.com.ua/pagead/* https://www.google.co.ug/pagead/* https://www.google.co.uk/pagead/* https://www.google.com.uy/pagead/* https://www.google.co.uz/pagead/* https://www.google.com.vc/pagead/* https://www.google.co.ve/pagead/* https://www.google.co.vi/pagead/* https://www.google.com.vn/pagead/* https://www.google.vu/pagead/* https://www.google.ws/pagead/* https://www.google.rs/pagead/* https://www.google.co.za/pagead/* https://www.google.co.zm/pagead/* https://www.google.co.zw/pagead/* https://www.google.cat/pagead/* https://*.google.com https://*.google-analytics.com https://*.doubleclick.net https://*.facebook.com https://*.hotjar.com https://*.hsforms.com https://*.twitter.com https://i.ytimg.com https://t.co https://plausible.io https://queue.simpleanalyticscdn.com https://www.googleadservices.com https://*.stape.io; connect-src 'self' https://*.hsforms.com https://*.s3.amazonaws.com https://*.hotjar.io https://*.hotjar.com wss://*.hotjar.com https://*.stape.io https://*.osano.com https://plausible.io https://*.algolia.net; frame-src 'self' https://*.hotjar.com https://*.hsforms.com https://*.stape.io https://player.vimeo.com https://www.youtube.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com; worker-src 'self' blob:; form-action 'self' https://*.hsforms.com; base-uri 'self'; frame-ancestors 'self' https://polkadot.com/; object-src 'none'; upgrade-insecure-requests |
| X-Frame-Options | SAMEORIGIN |
| Date | Thu, 17 Apr 2025 18:17:10 GMT |
| X-Amz-Cf-Pop | AMS58-P3 |
| X-Amz-Cf-Id | qFkFMig6dWUDuuGuDcXo3-ZasjLul5g4OcBo2xcMV9JLcPkBfHR3hA== |
| X-Amz-Server-Side-Encryption | AES256 |
| Etag | W/"da817d3891819b496d1581bf89f74d33" |
| Access-Control-Allow-Origin | * |
| Strict-Transport-Security | max-age=31536000 |
| Server | AmazonS3 |
| Vary | accept-encoding |
| Via | 1.1 73ce513d12556804240bd1d312686daa.cloudfront.net (CloudFront) |
| Access-Control-Max-Age | 600 |
| Cross-Origin-Opener-Policy | same-origin |
| X-Xss-Protection | 1; mode=block |
| Cache-Control | max-age=120, must-revalidate |
| Alt-Svc | h3=":443"; ma=86400 |
| X-Cache | RefreshHit from cloudfront |
By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.
This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.
We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.
Watch it now at TrustRadar