HTTP Headers Analysis for https://app.onelink.com

Detected Technologies from Headers

See all in URL Inspect 4

Amazon S3

hCaptcha

Nginx

Stripe

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Strong

base-uri; connect-src; default-src; +12 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store, must-revalidate

Expires

Caching

0

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache

Content Headers

Content-Length

Content

1070

Content-Type

Content

text/html; charset=UTF-8

content-length: 1070
content-type: text/html; charset=UTF-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: __Secure-stripe.link_app.last_link_brand=link; domain=link.com; path=/; expires=Sat, 15 Aug 2026 00:26:00 GMT; secure; HttpOnly; SameSite=Lax

Other Headers

Cross-Origin-Opener-Policy-Report-Only

Other

same-origin-allow-popups; report-to="wsp_coop"

Date

Other

Fri, 14 Aug 2026 00:26:00 GMT

Link

Other

URL /api/app_config?livemode=true&request_surface=web_link_app

rel=preload as=fetch

Report-To

Other

Group coop max-age: 2h

Endpoint 1 https://q.stripe.com/coop-report

Group wsp_coop max-age: 2h

Endpoint 1 https://q.stripe.com/coop-report?s=-uhFzYB4wSKMPYZP0w7Q03jQrC1XMpdpa2iX28_-cyr9F2okEGvd9CV7SUemGS5xW_isYw==

Group wsp_coep max-age: 2h

Endpoint 1 https://q.stripe.com/coep-report?s=-uhFzYB4wSKMPYZP0w7Q03jQrC1XMpdpa2iX28_-cyr9F2okEGvd9CV7SUemGS5xW_isYw==

Group csp max-age: 2h

Endpoint 1 https://q.stripe.com/csp-report-v2?q=-uhFzYB4wSKMPYZP0w7Q03jQrC1XMpdpa2iX28_-cyr9F2okEGvd9CV7SUemGS5xW_isYw%3D%3D&t=1

Reporting-Endpoints

Other

coop="https://q.stripe.com/coop-report", wsp_coop="https://q.stripe.com/coop-report?s=-uhFzYB4wSKMPYZP0w7Q03jQrC1XMpdpa2iX28_-cyr9F2okEGvd9CV7SUemGS5xW_isYw==", wsp_coep="https://q.stripe.com/coep-report?s=-uhFzYB4wSKMPYZP0w7Q03jQrC1XMpdpa2iX28_-cyr9F2okEGvd9CV7SUemGS5xW_isYw==", csp="https://q.stripe.com/csp-report-v2?q=-uhFzYB4wSKMPYZP0w7Q03jQrC1XMpdpa2iX28_-cyr9F2okEGvd9CV7SUemGS5xW_isYw%3D%3D&t=1"

Request-Id

Other

req_w6YhI1rvSybywB

X-Stripe-Proxy-Response

Other

upstream

X-Stripe-Server-Rpc-Duration-Micros

Other

19150

X-Wc

Other

3ff

cross-origin-opener-policy-report-only: same-origin-allow-popups; report-to="wsp_coop"
date: Fri, 14 Aug 2026 00:26:00 GMT
link: </api/app_config?livemode=true&request_surface=web_link_app>; rel=preload; as=fetch
report-to: {"group":"coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report"}],"include_subdomains":true}, {"group":"wsp_coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report?s=-uhFzYB4wSKMPYZP0w7Q03jQrC1XMpdpa2iX28_-cyr9F2okEGvd9CV7SUemGS5xW_isYw=="}],"include_subdomains":true}, {"group":"wsp_coep","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coep-report?s=-uhFzYB4wSKMPYZP0w7Q03jQrC1XMpdpa2iX28_-cyr9F2okEGvd9CV7SUemGS5xW_isYw=="}],"include_subdomains":true}, {"group":"csp","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/csp-report-v2?q=-uhFzYB4wSKMPYZP0w7Q03jQrC1XMpdpa2iX28_-cyr9F2okEGvd9CV7SUemGS5xW_isYw%3D%3D&t=1"}],"include_subdomains":true}
reporting-endpoints: coop="https://q.stripe.com/coop-report", wsp_coop="https://q.stripe.com/coop-report?s=-uhFzYB4wSKMPYZP0w7Q03jQrC1XMpdpa2iX28_-cyr9F2okEGvd9CV7SUemGS5xW_isYw==", wsp_coep="https://q.stripe.com/coep-report?s=-uhFzYB4wSKMPYZP0w7Q03jQrC1XMpdpa2iX28_-cyr9F2okEGvd9CV7SUemGS5xW_isYw==", csp="https://q.stripe.com/csp-report-v2?q=-uhFzYB4wSKMPYZP0w7Q03jQrC1XMpdpa2iX28_-cyr9F2okEGvd9CV7SUemGS5xW_isYw%3D%3D&t=1"
request-id: req_w6YhI1rvSybywB
x-stripe-proxy-response: upstream
x-stripe-server-rpc-duration-micros: 19150
x-wc: 3ff

Recommendations

Enable compression (gzip/brotli) to improve performance