| Header Name | Header Data |
|---|---|
| HTTP status code | 200 |
| Etag | W/"18e1ca-8GSblr9ClKXcOWM6nCXASOUjxZ4" |
| Referrer-Policy | strict-origin-when-cross-origin |
| Connection | keep-alive |
| Server | nginx/1.22.1 |
| X-Powered-By | Express |
| Strict-Transport-Security | max-age=31536000; includeSubdomains; |
| Content-Security-Policy | child-src https://*.doubleclick.net js.stripe.com *.clarity.ms vars.hotjar.com widget.trustpilot.com www.facebook.com www.google.com www.googletagmanager.com www.youtube.com https://*.googleapis.com *.google-analytics.com *.analytics.google.com https://*.googlesyndication.com ; connect-src 'self' data: blob: *.onfido.com wss://*.onfido.com clarity.microsoft.com *.clarity.ms snappcar.nl dzklgi3s0q69j.cloudfront.net api.woosmap.com api-js.mixpanel.com api.snappcar.de api.snappcar.nl api2.branch.io apitst1.snappcar.nl https://cms.tst1.snappcar.nl https://cms.snappcar.nl ekr.zdassets.com snappcar.zendesk.com in.hotjar.com https://*.doubleclick.net tst1.snappcar.nl *.hotjar.com wss://*.hotjar.com vc.hotjar.io wss://api.snappcar.de wss://api.snappcar.nl wss://apitst1.snappcar.nl www.facebook.com www.google-analytics.com www.google.com www.snappcar.nl api.trustpilot.com ka-f.fontawesome.com sentry.io bat.bing.com rum-collector-2.pingdom.net unpkg.com https://*.googleapis.com *.google-analytics.com *.analytics.google.com https://*.googlesyndication.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.woosmap.com https://*.getsitecontrol.com *.getsitectrl.com; default-src 'self' api.snappcar.de api.snappcar.nl https://*.doubleclick.net cdn.snappcar.nl connect.facebook.net linkmaker.itunes.apple.com sentry.io web.facebook.com widget.trustpilot.com wss://api.snappcar.de wss://api.snappcar.nl www.facebook.com www.google-analytics.com www.google.nl www.googleadservices.com www.googletagmanager.com ajax.googleapis.com api-js.mixpanel.com api.trustpilot.com api2.branch.io appleid.cdn-apple.com assets.customer.io blog.snappcar.nl cdn.branch.io cdn.mxpnl.com cdn.siftscience.com dgu73kunzs7kw.cloudfront.net dzklgi3s0q69j.cloudfront.net fonts.googleapis.com fonts.gstatic.com hexagon-analytics.com in.hotjar.com js.stripe.com maps.googleapis.com https://*.googleapis.com *.google-analytics.com *.analytics.google.com https://*.googlesyndication.com maps.gstatic.com script.hotjar.com static.hotjar.com track.customer.io vars.hotjar.com vc.hotjar.io *.clarity.ms www.gstatic.com www.snappcar.nl www.youtube.com www.lt45.net www.google.ie bat.bing.com heiseonline.github.io rum-collector-2.pingdom.net rum-static.pingdom.net unpkg.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.woosmap.com https://*.getsitecontrol.com *.getsitectrl.com; font-src 'self' connect.facebook.net d3ef8kpmd7tehc.cloudfront.net dgu73kunzs7kw.cloudfront.net dzklgi3s0q69j.cloudfront.net fonts.googleapis.com fonts.gstatic.com js.stripe.com ka-f.fontawesome.com kit-free.fontawesome.com optimize.google.com script.hotjar.com snappcar static.hotjar.com *.clarity.ms staticxx.facebook.com use.fontawesome.com vars.hotjar.com web.facebook.com widget.trustpilot.com www.facebook.com www.google.com www.youtube.com youtube.com maxcdn.bootstrapcdn.com https://*.hotjar.com https://*.woosmap.com https://*.getsitecontrol.com *.getsitectrl.com data 'unsafe-inline' data:; frame-src https://*.doubleclick.net js.stripe.com optimize.google.com *.clarity.ms vars.hotjar.com widget.trustpilot.com www.facebook.com www.google.com www.youtube.com https://*.googleapis.com *.google-analytics.com *.analytics.google.com https://*.googlesyndication.com https://*.hotjar.com https://consentcdn.cookiebot.com https://*.woosmap.com; img-src 'self' https://assets.onfido.com/ www.googleadservices.com theme.zdassets.com accounts.google.com apitst1.snappcar.nl blog.snappcar.nl cbks0.googleapis.com cdn.branch.io cdn.snappcar.nl connect.facebook.net www.snappcar.nl d3ef8kpmd7tehc.cloudfront.net dgu73kunzs7kw.cloudfront.net dzklgi3s0q69j.cloudfront.net emailsignature.trustpilot.com *.clarity.ms https://*.doubleclick.net hexagon-analytics.com l.facebook.com l.instagram.com linkmaker.itunes.apple.com lt45.net maps.googleapis.com https://*.googleapis.com *.google-analytics.com *.analytics.google.com https://*.googlesyndication.com maps.gstatic.com snappcarblogse.files.wordpress.com track.customer.io tst1.snappcar.nl web.facebook.com www.adyen.com www.facebook.com www.google-analytics.com www.google.com www.google.de www.google.nl www.googletagmanager.com www.gstatic.com www.lt45.net www.snappcar.de www.google.ie bat.bing.com data data: s3-eu-west-1.amazonaws.com d2j07qayxax6cc.cloudfront.net https://*.hotjar.com https://*.woosmap.com https://*.getsitecontrol.com *.getsitectrl.com https://crm.zohopublic.eu https://cms.tst1.snappcar.nl https://cms.snappcar.nl; media-src dzklgi3s0q69j.cloudfront.net https://*.hotjar.com https://*.woosmap.com; script-src-elem 'self' static.zdassets.com adservice.google.com ajax.googleapis.com api.mixpanel.com api.snappcar.de api.snappcar.nl apitst1.snappcar.nl app.link appleid.cdn-apple.com assets.customer.io cdn.branch.io cdn.mxpnl.com cdn.siftscience.com cdn.snappcar.nl code.jquery.com connect.facebook.net d3ef8kpmd7tehc.cloudfront.net dgu73kunzs7kw.cloudfront.net dzklgi3s0q69j.cloudfront.net facebook.com https://*.doubleclick.net clarity.microsoft.com *.clarity.ms hotjar.com hotjar.io itunes.apple.com js.stripe.com ka-f.fontawesome.com kit.fontawesome.com maps.googleapis.com https://*.googleapis.com *.google-analytics.com *.analytics.google.com https://*.googlesyndication.com mixpanel.com optimize.google.com script.hotjar.com sentry.io static.hotjar.com widget.trustpilot.com ws2.hotjar.com www.google-analytics.com www.google.com www.googleadservices.com www.googletagmanager.com www.gstatic.com www.snappcar.nl www.youtube.com maxcdn.bootstrapcdn.com stackpath.bootstrapcdn.com 'unsafe-inline' bat.bing.com heiseonline.github.io rum-static.pingdom.net snappcar.nl unpkg.com cdn.jsdelivr.net https://*.hotjar.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.woosmap.com https://*.getsitecontrol.com *.getsitectrl.com https://crm.zohopublic.eu http://*.licdn.com; script-src 'self' code.jquery.com cdn.jsdelivr.net stackpath.bootstrapcdn.com static.zdassets.com assets.zendesk.com ajax.googleapis.com app.link appleid.cdn-apple.com assets.customer.io cdn.branch.io cdn.mxpnl.com cdn.siftscience.com connect.facebook.net clarity.microsoft.com *.clarity.ms dgu73kunzs7kw.cloudfront.net dzklgi3s0q69j.cloudfront.net https://*.doubleclick.net js.stripe.com maps.googleapis.com https://*.googleapis.com *.google-analytics.com *.analytics.google.com https://*.googlesyndication.com script.hotjar.com static.hotjar.com widget.trustpilot.com www.google-analytics.com www.google.com www.googleadservices.com www.googletagmanager.com www.gstatic.com www.youtube.com maxcdn.bootstrapcdn.com https://*.hotjar.com 'unsafe-eval' 'unsafe-inline' bat.bing.com heiseonline.github.io rum-static.pingdom.net d3ef8kpmd7tehc.cloudfront.net unpkg.com https://*.woosmap.com https://*.getsitecontrol.com *.getsitectrl.com https://crm.zohopublic.eu ; style-src-elem 'self' dzklgi3s0q69j.cloudfront.net fonts.googleapis.com https://*.googleapis.com *.google-analytics.com *.analytics.google.com https://*.googlesyndication.com optimize.google.com maxcdn.bootstrapcdn.com stackpath.bootstrapcdn.com 'unsafe-inline' snappcar.nl https://*.hotjar.com https://*.woosmap.com; style-src 'self' dzklgi3s0q69j.cloudfront.net stackpath.bootstrapcdn.com fonts.googleapis.com https://*.googleapis.com *.google-analytics.com *.analytics.google.com https://*.googlesyndication.com https://*.hotjar.com https://*.woosmap.com maxcdn.bootstrapcdn.com 'unsafe-inline' 'unsafe-eval'; script-src-attr 'unsafe-inline'; style-src-attr 'unsafe-inline'; worker-src 'self' blob:; |
| Date | Thu, 17 Apr 2025 21:57:02 GMT |
| Content-Type | text/html; charset=utf-8 |
| X-Frame-Options | DENY |
By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.
This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.
We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.
Watch it now at TrustRadar