HTTP Headers report for www.fanatical.com

Header Name	Header Data
HTTP status code	200
Age	713
Vary	Accept-Encoding
Via	1.1 vegur
X-Frame-Options	SAMEORIGIN
Server	cloudflare
Date	Tue, 08 Apr 2025 12:12:26 GMT
Cf-Cache-Status	HIT
Etag	W/"93364a38e0e00d197331964dd1fe3948"
Reporting-Endpoints	heroku-nel=https://nel.heroku.com/reports?ts=1744015338&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&s=9f7YD8pPZt5GIMJTYqQ%2Fr76NC1qs%2BlDwcoRGyRm%2BgQw%3D
X-Xss-Protection	1; mode=block
Content-Type	text/html; charset=utf-8
Cache-Control	public; max-age=30
Strict-Transport-Security	max-age=31536000; includeSubDomains; preload
Referrer-Policy	strict-origin, strict-origin-when-cross-origin, origin-when-cross-origin
X-Content-Type-Options	nosniff
X-Fan-Version	5588
Alt-Svc	h3=":443"; ma=86400
Connection	keep-alive
Link	<https://fanatical.imgix.net/>; rel=preconnect, <https://cdn.fanatical.com/>; rel=preconnect, </static/css/styles~main.3bf04e6b.css>; rel=preload; as=style; nopush, </fonts/lato-v13-latin-regular.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous; nopush, </fonts/lato-v13-latin-700.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous; nopush, </fonts/lato-v13-latin-300.woff2>; rel=preload; as=font; type=font/woff2; crossorigin=anonymous; nopush, <https://www.fanatical.com/api/all/en>; rel=preload; as=fetch; crossorigin=anonymous; nopush, </static/js/main~04d03c27.3bb3da0c.js>; rel=preload; as=script; nopush, </static/js/main~0a037d97.6530c614.js>; rel=preload; as=script; nopush, </static/js/main~53eeb3a5.4b2e98cd.js>; rel=preload; as=script; nopush, </static/js/main~7aeafcb2.62d82894.js>; rel=preload; as=script; nopush, </static/js/vendors~main~27545368.ad6513b0.js>; rel=preload; as=script; nopush, </static/js/vendors~main~5a94f17d.a4f633e8.js>; rel=preload; as=script; nopush, </static/js/vendors~main~8739cb60.f5a2f3c1.js>; rel=preload; as=script; nopush, </static/js/vendors~main~cdd60c62.85992b47.js>; rel=preload; as=script; nopush, </static/js/vendors~main~e1927d24.36aef197.js>; rel=preload; as=script; nopush, </static/js/vendors~main~efdee510.5be34376.js>; rel=preload; as=script; nopush, </static/js/HomePage.2c43ecc3.js>; rel=prefetch; as=script; nopush, </static/js/default~HomePage~SearchPages~OnSale~GiftGuide.56999bc3.js>; rel=prefetch; as=script; nopush, </static/css/styles~HomePage~AboutUs~TrustBanner.e7d776d6.css>; rel=preload; as=style; nopush, </static/css/styles~HomePage~FacetSearch.e9526f0a.css>; rel=preload; as=style; nopush, </static/css/styles~HomePage~FacetSearch~GamesLike~SearchPages~OnSale~Account.76391c8b.css>; rel=preload; as=style; nopush, </static/css/styles~HomePage~FacetSearch~GamesLike~SearchPages~OnSale~Blog~Account.3a72d452.css>; rel=preload; as=style; nopush, </static/css/styles~HomePage~FacetSearch~SearchPages~OnSale.acf877f8.css>; rel=preload; as=style; nopush, </static/css/styles~HomePage~HPOmen~SearchPages.1c0d315d.css>; rel=preload; as=style; nopush, </static/css/styles~HomePage~HPOmen~SearchPages~Account~AdminPreview.3e971559.css>; rel=preload; as=style; nopush, </static/css/styles~HomePage~HPOmen~SearchPages~Account~AdminPreview~MegaMenus.9bd7c9da.css>; rel=preload; as=style; nopush, </static/css/styles~HomePage~HPOmen~SearchPages~Account~AdminPreview~ModalGroup.7260e58f.css>; rel=preload; as=style; nopush, </static/css/styles~HomePage~HPOmen~SearchPages~ProductPage~Account~AdminPreview~Pages~MegaMenus.88d7c67c.css>; rel=preload; as=style; nopush, </static/css/styles~HomePage~OnSale.1c0916be.css>; rel=preload; as=style; nopush, </static/css/styles~HomePage~Pages~AccountArea~SearchPages~OnSale~GiftGuide~Blog~Receipt~ProductPage.7d717978.css>; rel=preload; as=style; nopush, </static/css/styles~HomePage~Pages~SearchPages~Competition~OnSale~GiftGuide~Blog~Receipt~ProductPage.6d3ef8cf.css>; rel=preload; as=style; nopush, </static/css/styles~HomePage~Pages~SearchPages~OnSale~GiftGuide~Blog~Receipt~ProductPage.729cef3d.css>; rel=preload; as=style; nopush, </static/css/styles~HomePage~RedeemCode~Pages~AccountArea~SearchPages~OnSale~GiftGuide~Blog~Receipt~ProductPage~FooterGroup.185e564a.css>; rel=preload; as=style; nopush, </static/css/styles~HomePage~SearchPages~OnSale~GiftGuide~AssistantBanner.54fb6bd4.css>; rel=preload; as=style; nopush, </static/css/styles~HomePage~SearchPages~OnSale~MysteryBundleCard.b677e02b.css>; rel=preload; as=style; nopush, </static/css/styles~HomePage~SearchPages~OnSale~MysteryBundleCard~Bundle~MysteryBundlePage.5be0ceb0.css>; rel=preload; as=style; nopush, <https://www.fanatical.com/api/algolia/home-carousel/en>; rel=preload; as=fetch; crossorigin=anonymous; nopush, </static/js/HitCard.6fa51d80.js>; rel=prefetch; as=script; nopush, </static/js/FooterGroup.bf3b5200.js>; rel=prefetch; as=script; nopush, </static/js/MegaMenus.0d14a2eb.js>; rel=prefetch; as=script; nopush, </static/css/HitCard.4a9164c3.css>; rel=prefetch; as=style; nopush, </static/css/styles~FooterGroup.dd5e8ed0.css>; rel=prefetch; as=style; nopush, </static/css/styles~MegaMenus.ab0918be.css>; rel=prefetch; as=style; nopush, <https://cdn.fanatical.com/production/brand/trustpilot/svg/trustpilot-black-4half.svg>; rel=preload; as=image; nopush
Nel	{"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
Report-To	{"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1744015338&sid=67ff5de4-ad2b-4112-9289-cf96be89efed&s=9f7YD8pPZt5GIMJTYqQ%2Fr76NC1qs%2BlDwcoRGyRm%2BgQw%3D"}]}
X-Is-Cf-Worker	1
X-Worker-Cache-Status	HIT
Cf-Ray	92d1ac47ff64434e-AMS

About the tool

By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.

This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.

We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.

Watch it now at TrustRadar