Header Name | Header Data |
---|---|
HTTP status code | 200 |
Connection | keep-alive |
X-Debug-Info | eyJyZXRyaWVzIjowfQ== |
X-Middleware-Rewrite | /en |
Cf-Ray | 932646e09ac56621-AMS |
X-Powered-By | Next.js |
Cf-Cache-Status | HIT |
Content-Type | text/html; charset=utf-8 |
Cache-Control | s-maxage=86400, stale-while-revalidate, no-store |
Traceresponse | 00-18377d8edc19768e763e337384593bde-1b5af3d268ae00cf-01 |
X-Platform-Processor | 7ywew3a3ewijsg2khtcxv5vdai |
Date | Fri, 18 Apr 2025 18:38:02 GMT |
Vary | RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url, Accept-Encoding |
X-Nextjs-Cache | HIT |
X-Platform-Cluster | quo2dk66ne2o6-production-vohbr3y |
Strict-Transport-Security | max-age=15552000; includeSubDomains; preload |
Content-Security-Policy | img-src data: media.ulysse-nardin.com eu3-cdn.inside-graph.com www.google.com www.google.ch ct.pinterest.com *.ads.linkedin.com bat.bing.com www.google.fr api.ulysse-nardin.com localhost:3000 new.ulysse-nardin.com d38m6430ygimy0.cloudfront.net www.googletagmanager.com *.unlimited3d.com *.userway.org *.hubspot.com *.hsforms.com *.ulysse-nardin.com www.ulysse-nardin.com fonts.gstatic.com www.facebook.com cdn.cookielaw.org *.doubleclick.net bat.bing.net www.googleadservices.com *.snapchat.com;media-src 'self' media.ulysse-nardin.com google.com api.ulysse-nardin.com d38m6430ygimy0.cloudfront.net *.ulysse-nardin.com;frame-src 'self' forms.hsforms.com *.doubleclick.net www.theoceanrace.com vars.hotjar.com theoceanrace.geovoile.com service.force.com js.stripe.com ulysse-nardin.lpe.gatoreviews.com *.userway.org www.google.com admin.prooftag.com store.ulysse-nardin.com ct.pinterest.com www.facebook.com www.googletagmanager.com tel: mailto: *.snapchat.com;connect-src 'self' *.doubleclick.net eu3-live.inside-graph.com wss://eu3-live.inside-graph.com/ ct.pinterest.com *.hotjar.com *.hotjar.io wss://ws29.hotjar.com/api/v2/client/ws tfour.my.site.com 125268c633e8.f70af3f4.eu-west-1.token.awswaf.com js.stripe.com forms.hsforms.com hubspot-forms-static-embed.s3.amazonaws.com www.gstatic.com blob: www.googletagmanager.com *.unlimited3d.com *.userway.org *.hscollectedforms.net api.friendlycaptcha.com *.googlesyndication.com *.google-analytics.com *.linkedin.com www.google.com cdn.cookielaw.org *.clarity.ms *.analytics.google.com *.onetrust.com bat.bing.com bam.nr-data.net *.hubsport.com tfour.force.com bat.bing.net bat.bing.net google.com www.googleadservices.com api.hubapi.com *.snapchat.com;style-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' eu3-cdn.inside-graph.com tfour.my.site.com *.userway.org www.googletagmanager.com fonts.googleapis.com service.force.com tfour.force.com;script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' bat.bing.com snap.licdn.com connect.facebook.net s.pinimg.com googleads.g.doubleclick.net *.facebook.com cdnjs.cloudflare.com service.force.com tfour.my.salesforce.com service.force.com *.salesforceliveagent.com static.lightning.force.com tfour.my.site.com 125268c633e8.eu-west-1.sdk.awswaf.com 125268c633e8.f70af3f4.eu-west-1.token.awswaf.com js.hsforms.net www.gstatic.com blob: *.unlimited3d.com *.userway.org *.hs-scripts.com *.hs-analytics.net *.hscollectedforms.net *.hs-banner.com www.google.com api.friendlycaptcha.com www.googletagmanager.com www.clarity.ms unpkg.com cdn.cookielaw.org ct.pinterest.com *.newrelic.com www.googleadservices.com *.googlesyndication.com tfour.force.com sc-static.net js.hsadspixel.net static.cloudflareinsights.com *.snapchat.com; |
X-Platform-Router | z5sohqctjpgpc4jij2wslcveiu |
Server | cloudflare |
By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.
This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.
We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.
Watch it now at TrustRadar