stockport.gov.uk | Analytics by SecurityHeaders

HTTP Headers report for stockport.gov.uk

Header Name Header Data
HTTP status code 200
Content-Type text/html; charset=utf-8
X-Xss-Protection 0
Referrer-Policy strict-origin-when-cross-origin
X-Cache Miss from cloudfront
Connection keep-alive
Strict-Transport-Security max-age=63072000;includeSubDomains
Content-Security-Policy default-src https: wss: http:; child-src 'self' http://www.youtube.com https://www.youtube.com http://www.google.com/ https://www.google.com/ http://www.google.com/maps/ https://www.google.com/maps/ http://www.opinionstage.com/polls/ https://www.opinionstage.com/polls/ http://www.google.com/recaptcha/api2/anchor https://www.google.com/recaptcha/api2/anchor http://www.google.com/recaptcha/api2/bframe https://www.google.com/recaptcha/api2/bframe http://player.vimeo.com/ https://player.vimeo.com/ http://stage.midas-pps.tractivity.co.uk/ https://stage.midas-pps.tractivity.co.uk/ *.cloudfront.net/butotv/live/ https://y84kj.videomarketingplatform.co/ http://www.facebook.com/ https://www.facebook.com/ http://www.instagram.com/ https://www.instagram.com/ *.stockport.gov.uk *.smbcdigital.net http://stockportmaps.github.io https://stockportmaps.github.io blob: http://vars.hotjar.com/ https://vars.hotjar.com/ http://embed.buto.tv/ https://embed.buto.tv/ http://butoembed.twentythree.net/ https://butoembed.twentythree.net/ http://forms-eu1.hsforms.com https://forms-eu1.hsforms.com http://my.matterport.com https://my.matterport.com http://lookinglocal.cdn.spotlightr.com https://lookinglocal.cdn.spotlightr.com http://api-bridge.azurewebsites.net/ https://api-bridge.azurewebsites.net/; font-src 'self' http://font.googleapis.com https://font.googleapis.com http://maxcdn.bootstrapcdn.com/font-awesome/ https://maxcdn.bootstrapcdn.com/font-awesome/ http://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ http://kit.fontawesome.com/ https://kit.fontawesome.com/ http://ka-p.fontawesome.com/ https://ka-p.fontawesome.com/ http://fonts.gstatic.com/ https://fonts.gstatic.com/ http://stockportgov-design-system.s3-eu-west-1.amazonaws.com/ https://stockportgov-design-system.s3-eu-west-1.amazonaws.com/ http://design-system.stockport.gov.uk/ https://design-system.stockport.gov.uk/ http://static.tacdn.com https://static.tacdn.com data: http://s3-eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com http://api.reciteme.com/assets/ https://api.reciteme.com/assets/; img-src 'self' http://khms0.googleapis.com https://khms0.googleapis.com http://khms1.googleapis.com https://khms1.googleapis.com http://geo0.ggpht.com https://geo0.ggpht.com http://geo1.ggpht.com https://geo1.ggpht.com http://geo2.ggpht.com https://geo2.ggpht.com http://geo3.ggpht.com https://geo3.ggpht.com http://cbks0.googleapis.com https://cbks0.googleapis.com http://csi.gstatic.com https://csi.gstatic.com http://maps.gstatic.com https://maps.gstatic.com http://maps.googleapis.com https://maps.googleapis.com http://images.contentful.com/ https://images.contentful.com/ http://images.ctfassets.net https://images.ctfassets.net http://www.google-analytics.com/r/collect https://www.google-analytics.com/r/collect http://www.google-analytics.com/collect https://www.google-analytics.com/collect http://streetviewpixels-pa.googleapis.com https://streetviewpixels-pa.googleapis.com http://stats.g.doubleclick.net/r/collect https://stats.g.doubleclick.net/r/collect http://s3-eu-west-1.amazonaws.com/ https://s3-eu-west-1.amazonaws.com/ http://maps.stockport.gov.uk/ https://maps.stockport.gov.uk/ http://interactive.stockport.gov.uk/ https://interactive.stockport.gov.uk/ http://ads.astuntechnology.com/ https://ads.astuntechnology.com/ http://s3-eu-west-1.amazonaws.com/ https://s3-eu-west-1.amazonaws.com/ http://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/ https://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/ http://customer.cludo.com/img/ https://customer.cludo.com/img/ http://uk1.siteimprove.com/ https://uk1.siteimprove.com/ http://stockportb.logo-net.co.uk/ https://stockportb.logo-net.co.uk/ http://cloudfront.net/butotv/ https://cloudfront.net/butotv/ data: http://www.tripadvisor.co.uk/ https://www.tripadvisor.co.uk/ http://syndication.twitter.com/i/ https://syndication.twitter.com/i/ http://platform.twitter.com/css/ https://platform.twitter.com/css/ http://pbs.twimg.com/ https://pbs.twimg.com/ http://1.bp.blogspot.com/-v6yARqgGaBc/WKL2ZtO9lhI/AAAAAAAAEDU/0CJfMgpdnWg0i6-Wd87E1vTtdKk4TeikQCLcB/s1600/Fake-or-Counterfeit-Bathmate-Pumps.png https://1.bp.blogspot.com/-v6yARqgGaBc/WKL2ZtO9lhI/AAAAAAAAEDU/0CJfMgpdnWg0i6-Wd87E1vTtdKk4TeikQCLcB/s1600/Fake-or-Counterfeit-Bathmate-Pumps.png http://content.govdelivery.com/attachments/fancy_images/UKSMBC/2018/01/1741761/reviewoverlay_original.png https://content.govdelivery.com/attachments/fancy_images/UKSMBC/2018/01/1741761/reviewoverlay_original.png http://app.meetami.ai https://app.meetami.ai *.cloudfront.net/butotv/live/ http://www.facebook.com/ https://www.facebook.com/ *.siteimproveanalytics.io/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ blob: http://spatial.stockport.gov.uk/ https://spatial.stockport.gov.uk/ http://ssl.gstatic.com/ https://ssl.gstatic.com/ http://www.gstatic.com/ https://www.gstatic.com/ http://lh3.googleusercontent.com/ https://lh3.googleusercontent.com/ http://api.reciteme.com/ https://api.reciteme.com/ http://aomg-sr-app-live.s3.eu-west-1.amazonaws.com/ https://aomg-sr-app-live.s3.eu-west-1.amazonaws.com/ http://forms.hsforms.com https://forms.hsforms.com http://forms-eu1.hsforms.com https://forms-eu1.hsforms.com http://lh3.ggpht.com https://lh3.ggpht.com http://cdn.jsdelivr.net https://cdn.jsdelivr.net http://img.freepik.com/free-vector/ https://img.freepik.com/free-vector/; style-src 'self' 'unsafe-inline' http://cludo.com/css/ https://cludo.com/css/ http://customer.cludo.com/css/ https://customer.cludo.com/css/ http://stockportgov-design-system.s3-eu-west-1.amazonaws.com/ https://stockportgov-design-system.s3-eu-west-1.amazonaws.com/ http://s3-eu-west-1.amazonaws.com/ https://s3-eu-west-1.amazonaws.com/ http://maxcdn.bootstrapcdn.com/font-awesome/ https://maxcdn.bootstrapcdn.com/font-awesome/ http://kit.fontawesome.com/ https://kit.fontawesome.com/ http://ka-p.fontawesome.com/ https://ka-p.fontawesome.com/ http://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ http://fonts.googleapis.com/ https://fonts.googleapis.com/ http://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/ https://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/ http://maps.stockport.gov.uk/ https://maps.stockport.gov.uk/ http://design-system.stockport.gov.uk/ https://design-system.stockport.gov.uk/ http://cloudfront.net/butotv/ https://cloudfront.net/butotv/ http://tripadvisor.com https://tripadvisor.com http://tripadvisor.co.uk https://tripadvisor.co.uk http://static.tacdn.com https://static.tacdn.com data: http://platform.twitter.com/css/ https://platform.twitter.com/css/ http://stockportb.logo-net.co.uk/Delivery/ https://stockportb.logo-net.co.uk/Delivery/ *.cloudfront.net/butotv/live/ http://tagmanager.google.com/ https://tagmanager.google.com/ http://cdn.websitepolicies.io/lib/cookieconsent/cookieconsent.min.css https://cdn.websitepolicies.io/lib/cookieconsent/cookieconsent.min.css http://unpkg.com/ https://unpkg.com/ http://api.mapbox.com/ https://api.mapbox.com/ http://api.reciteme.com/ https://api.reciteme.com/ http://cdn.jsdelivr.net https://cdn.jsdelivr.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://ajax.googleapis.com/ajax/libs/jquery/ https://ajax.googleapis.com/ajax/libs/jquery/ http://maps.googleapis.com https://maps.googleapis.com http://apis.google.com https://apis.google.com http://www.google-analytics.com/analytics.js https://www.google-analytics.com/analytics.js http://tagmanager.google.com/ https://tagmanager.google.com/ http://api.cludo.com/scripts/ https://api.cludo.com/scripts/ http://customer.cludo.com/scripts/ https://customer.cludo.com/scripts/ http://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/ https://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/ http://design-system.stockport.gov.uk/ https://design-system.stockport.gov.uk/ http://s3.eu-west-1.amazonaws.com/ https://s3.eu-west-1.amazonaws.com/ http://maps.stockport.gov.uk/ https://maps.stockport.gov.uk/ http://js.buto.tv/video/ https://js.buto.tv/video/ http://siteimproveanalytics.com/js/ https://siteimproveanalytics.com/js/ http://logo-net.co.uk/Delivery/ https://logo-net.co.uk/Delivery/ http://www.opinionstage.com/assets/loader.js https://www.opinionstage.com/assets/loader.js http://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/api.js http://www.gstatic.com/recaptcha/ https://www.gstatic.com/recaptcha/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ http://d26b395fwzu5fz.cloudfront.net/keen-tracking-1.1.3.min.js https://d26b395fwzu5fz.cloudfront.net/keen-tracking-1.1.3.min.js http://www.jscache.com/ https://www.jscache.com/ http://tripadvisor.com https://tripadvisor.com http://tripadvisor.co.uk https://tripadvisor.co.uk http://static.tacdn.com https://static.tacdn.com http://cdnjs.cloudflare.com/ajax/libs/clipboard.js/1.7.1/clipboard.min.js https://cdnjs.cloudflare.com/ajax/libs/clipboard.js/1.7.1/clipboard.min.js http://platform.twitter.com/ https://platform.twitter.com/ http://cdn.syndication.twimg.com/timeline/ https://cdn.syndication.twimg.com/timeline/ http://platform.twitter.com/css/ https://platform.twitter.com/css/ http://local.tractivity.co.uk/wp-includes/js/ https://local.tractivity.co.uk/wp-includes/js/ http://stage.midas-pps.tractivity.co.uk/ https://stage.midas-pps.tractivity.co.uk/ http://content.govdelivery.com/overlay/js/4939.js https://content.govdelivery.com/overlay/js/4939.js http://core-api-eu1.cludo.com/ https://core-api-eu1.cludo.com/ http://app.meetami.ai/ https://app.meetami.ai/ http://stockportgov-design-system.s3-eu-west-1.amazonaws.com/ https://stockportgov-design-system.s3-eu-west-1.amazonaws.com/ wss://chat.meetami.ai/ wss://chat.meetami.ai/socket.io/ http://cdn.trackjs.com/releases/current/tracker.js https://cdn.trackjs.com/releases/current/tracker.js http://feed2js.org/feed2js.php https://feed2js.org/feed2js.php http://connect.facebook.net/ https://connect.facebook.net/ http://widget.wheredoivote.co.uk/ https://widget.wheredoivote.co.uk/ http://static.hotjar.com/ https://static.hotjar.com/ http://cdn.websitepolicies.io/lib/cookieconsent/cookieconsent.min.js https://cdn.websitepolicies.io/lib/cookieconsent/cookieconsent.min.js http://unpkg.com/ https://unpkg.com/ http://api.mapbox.com/ https://api.mapbox.com/ http://script.hotjar.com/ https://script.hotjar.com/ http://spatialgeojson.s3.eu-west-1.amazonaws.com https://spatialgeojson.s3.eu-west-1.amazonaws.com http://spatialgeojson.s3-eu-west-1.amazonaws.com https://spatialgeojson.s3-eu-west-1.amazonaws.com http://www.browsealoud.com/ https://www.browsealoud.com/ http://plus.browsealoud.com/ https://plus.browsealoud.com/ http://speech.speechstream.net/ https://speech.speechstream.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ http://api.reciteme.com https://api.reciteme.com http://js-eu1.hsforms.net https://js-eu1.hsforms.net http://js-eu1.hs-scripts.com https://js-eu1.hs-scripts.com http://js-eu1.hscollectedforms.net https://js-eu1.hscollectedforms.net http://js-eu1.hs-analytics.net https://js-eu1.hs-analytics.net http://js-eu1.hs-banner.com https://js-eu1.hs-banner.com http://js-eu1.hsadspixel.net https://js-eu1.hsadspixel.net http://forms-eu1.hsforms.com https://forms-eu1.hsforms.com http://www.freeprivacypolicy.com https://www.freeprivacypolicy.com http://unpkg.com/@googlemaps/ https://unpkg.com/@googlemaps/ http://kit.fontawesome.com/ https://kit.fontawesome.com/ http://ka-p.fontawesome.com/ https://ka-p.fontawesome.com/ http://cdn.jsdelivr.net https://cdn.jsdelivr.net http://static.qa.conesso.io/scripts/signup.js https://static.qa.conesso.io/scripts/signup.js; connect-src 'self' http://api.cludo.com/ https://api.cludo.com/ http://buto-ping-middleman.buto.tv/ https://buto-ping-middleman.buto.tv/ http://kinesis-ping-middleman.buto.tv https://kinesis-ping-middleman.buto.tv http://kinesis.eu-west-1.amazonaws.com/ https://kinesis.eu-west-1.amazonaws.com/ http://zldiarvaya.execute-api.eu-west-1.amazonaws.com/prod/ https://zldiarvaya.execute-api.eu-west-1.amazonaws.com/prod/ http://13bg9nmobj.execute-api.eu-west-1.amazonaws.com/production/player-analytics https://13bg9nmobj.execute-api.eu-west-1.amazonaws.com/production/player-analytics http://core-api-eu1.cludo.com/ https://core-api-eu1.cludo.com/ http://api-eu1.cludo.com/ https://api-eu1.cludo.com/ http://event-collector.buto.tv/ https://event-collector.buto.tv/ http://app.meetami.ai/ https://app.meetami.ai/ http://chat.meetami.ai/ https://chat.meetami.ai/ wss://chat.meetami.ai/ wss://chat.meetami.ai/socket.io/ http://localhost/sitereplier/chats/enabled/ https://localhost/sitereplier/chats/enabled/ *.stockport.gov.uk *.smbcdigital.net http://api.mapbox.com/ https://api.mapbox.com/ http://events.mapbox.com/ https://events.mapbox.com/ http://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css http://kit.fontawesome.com/ https://kit.fontawesome.com/ http://api.buto.tv/ https://api.buto.tv/ http://spatialgeojson.s3.eu-west-1.amazonaws.com https://spatialgeojson.s3.eu-west-1.amazonaws.com http://spatialgeojson.s3-eu-west-1.amazonaws.com https://spatialgeojson.s3-eu-west-1.amazonaws.com http://report.23video.com/ https://report.23video.com/ http://plus.browsealoud.com/ https://plus.browsealoud.com/ http://www.browsealoud.com/ https://www.browsealoud.com/ http://speech.speechstream.net/ https://speech.speechstream.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ http://region1.google-analytics.com/g/collect https://region1.google-analytics.com/g/collect http://maps.googleapis.com https://maps.googleapis.com http://stats.reciteme.com https://stats.reciteme.com http://api.reciteme.com https://api.reciteme.com http://events.reciteme.com https://events.reciteme.com http://s3.eu-west-1.amazonaws.com/maps.stockport.gov.uk/ https://s3.eu-west-1.amazonaws.com/maps.stockport.gov.uk/ http://raw.githubusercontent.com/OrdnanceSurvey/ https://raw.githubusercontent.com/OrdnanceSurvey/ http://api.os.uk/ https://api.os.uk/ http://forms-eu1.hsforms.com https://forms-eu1.hsforms.com http://forms.hsforms.com https://forms.hsforms.com http://forms-eu1.hscollectedforms.net https://forms-eu1.hscollectedforms.net http://api-eu1.hubapi.com https://api-eu1.hubapi.com http://hubspot-forms-static-embed-eu1.s3.amazonaws.com/ https://hubspot-forms-static-embed-eu1.s3.amazonaws.com/ http://ka-p.fontawesome.com/ https://ka-p.fontawesome.com/ http://lookinglocal.cdn.spotlightr.com/ https://lookinglocal.cdn.spotlightr.com/ http://api.conesso.io/v2/signup-forms/contact https://api.conesso.io/v2/signup-forms/contact; media-src 'self' blob: http://www.youtube.com/ https://www.youtube.com/ *.cloudfront.net/butotv/live/ http://wpc.196c.planetstream.net/00196C/audio/ https://wpc.196c.planetstream.net/00196C/audio/ http://app.meetami.ai/ https://app.meetami.ai/ *.meetami.ai/ http://api.reciteme.com/ https://api.reciteme.com/ http://lookinglocal.cdn.spotlightr.com/ https://lookinglocal.cdn.spotlightr.com/; object-src 'self' http://www.youtube.com https://www.youtube.com http://www.youtube.com https://www.youtube.com; manifest-src 'self' http://localhost:5000/assets/images/ui-images/sg/manifest.json https://localhost:5000/assets/images/ui-images/sg/manifest.json; frame-ancestors 'self' *.stockport.gov.uk *.smbcdigital.net *.meetami.ai/ *.chat.meetami.ai/ http://forms.stockport.gov.uk https://forms.stockport.gov.uk http://app.contentful.com https://app.contentful.com http://forms-eu1.hsforms.com https://forms-eu1.hsforms.com http://my.matterport.com https://my.matterport.com http://int-formbuilder-origin.smbcdigital.net https://int-formbuilder-origin.smbcdigital.net http://lookinglocal.cdn.spotlightr.com/ https://lookinglocal.cdn.spotlightr.com/;
X-Amz-Cf-Id UpUixR64o7xwnZtJ0uyK29BpRxvrVsbqgC8HxCL00_79YuzpkXkRnw==
Cache-Control public,max-age=1800
X-Content-Type-Options nosniff
Via 1.1 ef674a9df28e4fc8d944ae07304fa954.cloudfront.net (CloudFront)
X-Amz-Cf-Pop AMS1-P1
Date Sun, 20 Apr 2025 08:09:28 GMT
X-Frame-Options DENY
X-Permitted-Cross-Domain-Policies none;

About the tool

By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.

This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.

We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.

Watch it now at TrustRadar