| Header Name | Header Data |
|---|---|
| HTTP status code | 200 |
| Date | Thu, 10 Apr 2025 02:01:27 GMT |
| Connection | keep-alive |
| Link | <https://stage.static.skyassets.com>; rel="preconnect" |
| X-Ruxit-Js-Agent | true |
| Expires | Thu, 10 Apr 2025 02:01:27 GMT |
| Pragma | no-cache |
| Set-Cookie | countryAKA=other; path=/; domain=.sky.com; secure |
| X-Queueit-Connector | akamai |
| Strict-Transport-Security | max-age=63072000; preload |
| X-Powered-By | Next.js |
| Server-Timing | dtSInfo;desc="0", dtRpid;desc="-524177917" |
| Server | Google Frontend |
| X-Frame-Options | SAMEORIGIN |
| X-Content-Type-Options | nosniff |
| Etag | "np7a2gk8xi6hab:dtagent10309250310100759aE7x" |
| X-Oneagent-Js-Injection | true |
| X-Akamai-Transformed | 9 - 0 pmb=mTOE,1 |
| Vary | Accept-Encoding |
| Content-Type | text/html; charset=utf-8 |
| Cache-Control | max-age=0, no-cache, no-store |
| Content-Security-Policy | default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' android-webview-video-poster: *.sky.com *.bskyb.com *.skyassets.com *.awin1.com *.clicktale.net *.contentsquare.net *.contentsquare.com *.demdex.net *.doubleclick.net *.googlesyndication.com *.google.com *.google.co.uk *.google.ie *.google-analytics.com *.lpsnmedia.net *.liveperson.net *.lucidcx.com skycustomer.likewizesupport.com sky.likewizesupport.com *.optimizely.com *.qualtrics.com *.snapchat.com *.tvsquared.com *.intercom.io *.intercomcdn.com *.kampyle.com *.medallia.eu *.paa-reporting-advertising.amazon *.yimg.com *.yext-pixel.com *.stripe.com *.taggstar.com aax-eu.amazon-adsystem.com acdn.adnxs.com analytics.twitter.com analytics.tiktok.com answers2-embed.sky.com.pagescdn.com assets.sitescdn.net assets.adobedtm.com bat.bing.com britishskybroadcasti.tt.omtrdc.net cdn-assets-prod.s3.amazonaws.com cdn.co-buying.com cdn.privacy-mgmt.com cdn.spatialbuzz.com cdn.tt.omtrdc.net cdnjs.cloudflare.com connect.facebook.net content.zeotap.com c.amazon-adsystem.com dmp.vfwmrm.net edge.adobedc.net ib.adnxs.com js.smct.co js.smct.io js-cdn.dynatrace.com maps.googleapis.com platform.twitter.com rules.quantcount.com s0.2mdn.net s.pinimg.com sc-static.net secure.quantserve.com secure.adnxs.com servedby.flashtalking.com smct.co smct.io static.ads-twitter.com t.promotionx.io the.sciencebehindecommerce.com track.uniqodo.com unpkg.com www.dwin1.com www.zenaps.com www.facebook.com www.googletagmanager.com www.googleadservices.com www.gstatic.com www.uqd.io yahoo.com cdn.branch.io api2.branch.io api.branch.io app.link players.brightcove.net vjs.zencdn.net; style-src 'self' 'unsafe-inline' *.sky.com *.skyassets.com s0.2mdn.net www.gstatic.com *.liveperson.net www.facebook.com *.doubleclick.net assets.adobedtm.com *.lpsnmedia.net *.clicktale.net *.contentsquare.net *.googlesyndication.com sky.lucidcx.com skycustomer.likewizesupport.com sky.likewizesupport.com fonts.googleapis.com assets.sitescdn.net *.kampyle.com *.medallia.eu players.brightcove.net; font-src 'self' data: *.sky.com fonts.gstatic.com *.skyassets.com use.typekit.net *.google.com *.google.co.uk *.google.ie sky.lucidcx.com skycustomer.likewizesupport.com sky.likewizesupport.com *.snapchat.com www.pinterest.com fonts.smct.co fonts.smct.io fonts.gstatic.com *.intercomcdn.com *.kampyle.com *.medallia.eu players.brightcove.net; img-src 'self' data: android-webview-video-poster: *.sky.com *.doubleclick.net *.skyassets.com bat.bing.com *.clicktale.net *.optimizely.com *.tvsquared.com *.demdex.net *.online-metrix.net *.qualtrics.com t.co tracking.audio.thisisdax.com www.facebook.com *.google-analytics.com *.google.com *.google.co.uk *.google.ie *.atdmt.com *.cloudfront.net live.staticflickr.com tags.w55c.net www.googletagmanager.com *.contentstack.io *.lpsnmedia.net s0.2mdn.net www.zenaps.com connect.facebook.net engagement.uniqodo.com *.liveperson.net www.gstatic.com www.awin1.com analytics.twitter.com cdn.spatialbuzz.com assets.adobedtm.com cdn.privacy-mgmt.com *.googlesyndication.com *.contentsquare.net www.googleadservices.com servedby.flashtalking.com *.lucidcx.com skycustomer.likewizesupport.com sky.likewizesupport.com uniqodo.s3-eu-west-1.amazonaws.com pixel.quantserve.com *.sky 8th.io sc-static.net acdn.adnxs.com s.pinimg.com ib.adnxs.com match.adsrvr.org pm.w55c.net dmp.v.fwmrm.net ct.pinterest.com *.snapchat.com www.pinterest.com secure.adnxs.com events.smct.co *.yahoo.com *.gumgum.com smct.co cdn.smct.co smct.io cdn.smct.io px.smct.co px.smct.io ep.smct.co ep.smct.io maps.gstatic.com maps.googleapis.com *.mktgcdn.com *.yext-pixel.com aax-eu.amazon-adsystem.com a.promotionx.io cm.g.doubleclick.net cms.quantserve.com mwzeom.zeotap.com c.amazon-adsystem.com analytics.tiktok.com *.intercomassets.eu *.intercomassets.com *.intercom.io *.intercomcdn.eu *.intercomcdn.com *.kampyle.com *.medallia.eu cdn.branch.io api2.branch.io api.branch.io app.link players.brightcove.net *.boltdns.net *.akamaihd.net *.brightcove.com *.brightcovecdn.com; connect-src 'self' blob: android-webview-video-poster: *.sky.com a.promotionx.io aax-eu.amazon-adsystem.com acdn.adnxs.com analytics.tiktok.com api.amplitude.com api.amplitude.com api.iperceptions.com api.taggstar.com assets.adobedtm.com awk.epgsky.com bat.bing.com britishskybroadcasti.tt.omtrdc.net c.amazon-adsystem.com cdn-assets-prod.s3.amazonaws.com cdn.privacy-mgmt.com cdn.spatialbuzz.com cdn.taggstar.com cfg.smct.co cfg.smct.io connect.facebook.net cognito-identity.eu-west-1.amazonaws.com ct.pinterest.com dmp.v.fwmrm.net edge.adobedc.net engagement.uniqodo.com ep.smct.co ep.smct.io firehose.eu-west-1.amazonaws.com help-search-api-stage.herokuapp.com https://google.com ib.adnxs.com insights.uniqodo.com ipb.smct.co ipb.smct.io ipl.smct.co ipl.smct.io js.smct.co js.smct.io justo.uniqodo.com *.yext.com maps.googleapis.com match.adsrvr.org mwzeom.zeotap.com paa-reporting-advertising.amazon pm.w55c.net poc.idscan.cloud prod.idscan.cloud prod-my-photo-api.herokuapp.com production-retriever.herokuapp.com qa.taggstar.com s0.2mdn.net s.pinimg.com sc-static.net secure.adnxs.com smct.co smct.io spl.zeotap.com t.promotionx.io track.uniqodo.com the.sciencebehindecommerce.com vip.timezonedb.com wss://*.liveperson.net wss://*.sky.com www.facebook.com www.googleadservices.com www.googletagmanager.com www.gstatic.com www.pinterest.com www.pinterest.co.uk www.zenaps.com *.akstat.io *.assistant.watson.appdomain.cloud *.bf.dynatrace.com *.bskyb.com *.clicktale.net *.contentsquare.net *.contentstack.io *.demdex.net *.doubleclick.net *.google.com *.google.co.uk *.google.ie *.googlesyndication.com *.google-analytics.com *.liveperson.net *.lpsnmedia.net *.lucidcx.com skycustomer.likewizesupport.com sky.likewizesupport.com *.optimizely.com *.qualtrics.com *.skyassets.com *.snapchat.com *.taggstar.com *.tvsquared.com *.wepowerconnections.com *.yext-pixel.com *.yimg.com *.intercom.io *.intercomcdn.com *.intercomcdn.eu *.intercomusercontent.com *.paa-reporting-advertising.amazon *.yextapis.com *.kampyle.com *.medallia.eu cdn.branch.io api2.branch.io api.branch.io app.link *.boltdns.net players.brightcove.net edge.api.brightcove.com *.akamaihd.net *.brightcovecdn.com faro-collector-prod-eu-west-0.grafana.net; frame-src 'self' blob: *.sky.com *.bskyb.com *.skyassets.com *.doubleclick.net *.optimizely.com *.demdex.net *.online-metrix.net *.lpsnmedia.net *.qualtrics.com www.facebook.com cdn.privacy-mgmt.com universal.iperceptions.com *.google.com *.google.co.uk *.google.ie *.clicktale.net s0.2mdn.net www.zenaps.com connect.facebook.net *.liveperson.net analytics.twitter.com cdn.spatialbuzz.com assets.adobedtm.com *.googlesyndication.com *.google-analytics.com *.contentsquare.net www.googleadservices.com sky.lucidcx.com skycustomer.likewizesupport.com sky.likewizesupport.com live.tvgenius.net servedby.flashtalking.com players.brightcove.net sc-static.net acdn.adnxs.com s.pinimg.com ib.adnxs.com match.adsrvr.org pm.w55c.net dmp.v.fwmrm.net *.snapchat.com ct.pinterest.com www.pinterest.com secure.adnxs.com www.pinterest.co.uk smct.co smct.io ls.smct.co ls.smct.io d2d7do8qaecbru.cloudfront.net w.etadirect.com aax-eu.amazon-adsystem.com *.stripe.com answers2-embed.sky.com.pagescdn.com www.awin1.com c.amazon-adsystem.com *.kampyle.com *.medallia.eu paa-reporting-advertising.amazon *.paa-reporting-advertising.amazon cdn.branch.io api2.branch.io api.branch.io app.link; frame-ancestors 'self'; worker-src 'self' blob: *.sky.com *.skyassets.com assets.adobedtm.com *.liveperson.net; child-src 'self' blob: *.intercom-sheets.com; media-src 'self' data: *.sky.com *.skyassets.com *.contentstack.io *.lpsnmedia.net *.doubleclick.net *.google.com *.google.co.uk *.google.ie *.clicktale.net *.liveperson.net www.facebook.com bat.bing.com *.demdex.net assets.adobedtm.com *.google-analytics.com *.contentsquare.net *.googlesyndication.com *.intercomcdn.com blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; object-src 'self' *.sky.com; form-action *.intercom.io *.intercom.help; report-uri /csp-reports |
By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.
This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.
We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.
Watch it now at TrustRadar