HTTP Headers Analysis for https://auth.onelink.com

Detected Technologies from Headers

See all in URL Inspect 14

AWS CloudFront

AWS

Amazon S3

DocuSign

Fastly

Google Fonts

Google reCAPTCHA

Google Search

Google Static File Front End

Google Translate

hCaptcha

Nginx

Stripe

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Good

base-uri; child-src; connect-src; +15 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Missing

Not configured

Recommendations

• Strengthen CSP by removing 'unsafe-eval'
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

max-age=0, no-cache, no-store, must-revalidate

Expires

Caching

0

Pragma

Caching

no-cache

cache-control: max-age=0, no-cache, no-store, must-revalidate
expires: 0
pragma: no-cache

Content Headers

Content-Length

Content

144800

Content-Type

Content

text/html;charset=utf-8

content-length: 144800
content-type: text/html;charset=utf-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

Set-Cookie

Cookies

set-cookie: __Host-session=; path=/; max-age=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; secure
site-auth=; domain=stripe.com; path=/; max-age=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; secure
machine_identifier=jH4fvZFRdNUkJkxyR4alGBhyvDhDoA4RYu8ffcYwTV3ukyQtydyc2Uoidp0zEGmVwU8%3D; domain=stripe.com; path=/; expires=Sat, 14 Aug 2027 16:51:48 GMT; secure; HttpOnly; SameSite=Lax
private_machine_identifier=XyLp30uhxYQ%2Fmzaz7G1PDPgTw8ohzlzeP7L59IacxVwRhlbDNwvtRMrNz%2FdCVAN6AUU%3D; domain=stripe.com; path=/; expires=Sat, 14 Aug 2027 16:51:48 GMT; secure; HttpOnly; SameSite=None
cid=e35d13ec-c0b7-4ccc-a74a-728d7f6aae13; domain=stripe.com; path=/; expires=Thu, 12 Nov 2026 16:51:48 GMT; secure; SameSite=Lax
__stripe_orig_props=%7B%22referrer%22%3A%22%22%2C%22landing%22%3A%22https%3A%2F%2Fdashboard.stripe.com%2Flogin%22%7D; domain=stripe.com; path=/; expires=Sat, 14 Aug 2027 16:51:48 GMT; secure; HttpOnly; SameSite=Lax

Other Headers

Date

Other

Fri, 14 Aug 2026 16:51:48 GMT

Report-To

Other

Group coop max-age: 2h

Endpoint 1 https://q.stripe.com/coop-report

Group wsp_coop max-age: 2h

Endpoint 1 https://q.stripe.com/coop-report?s=-Qd23NxB1zCUwZizH-epeRsRZgXloEdgdIpTxEGA5iBsdClG9db5uOwoTBiUdZWKIKTiSMZuoao=

Group wsp_coep max-age: 2h

Endpoint 1 https://q.stripe.com/coep-report?s=-Qd23NxB1zCUwZizH-epeRsRZgXloEdgdIpTxEGA5iBsdClG9db5uOwoTBiUdZWKIKTiSMZuoao=

Group csp max-age: 2h

Endpoint 1 https://q.stripe.com/csp-report-v2?q=-Qd23NxB1zCUwZizH-epeRsRZgXloEdgdIpTxEGA5iBsdClG9db5uOwoTBiUdZWKIKTiSMZuoao%3D&t=1

Reporting-Endpoints

Other

coop="https://q.stripe.com/coop-report", wsp_coop="https://q.stripe.com/coop-report?s=-Qd23NxB1zCUwZizH-epeRsRZgXloEdgdIpTxEGA5iBsdClG9db5uOwoTBiUdZWKIKTiSMZuoao=", wsp_coep="https://q.stripe.com/coep-report?s=-Qd23NxB1zCUwZizH-epeRsRZgXloEdgdIpTxEGA5iBsdClG9db5uOwoTBiUdZWKIKTiSMZuoao=", csp="https://q.stripe.com/csp-report-v2?q=-Qd23NxB1zCUwZizH-epeRsRZgXloEdgdIpTxEGA5iBsdClG9db5uOwoTBiUdZWKIKTiSMZuoao%3D&t=1"

Request-Id

Other

req_sGUQ6pSYBMiTmP

Stripe-Action-Id

Other

iad1DwzaLgYyIglCu3dc4Bz

X-Stripe-Priority-Routing-Enabled

Other

true

X-Stripe-Proxy-Response

Other

upstream

X-Stripe-Routing-Context-Priority-Tier

Other

livemode

X-Stripe-Server-Rpc-Duration-Micros

Other

62702

X-Wc

Other

3ff

date: Fri, 14 Aug 2026 16:51:48 GMT
report-to: {"group":"coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report"}],"include_subdomains":true}, {"group":"wsp_coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report?s=-Qd23NxB1zCUwZizH-epeRsRZgXloEdgdIpTxEGA5iBsdClG9db5uOwoTBiUdZWKIKTiSMZuoao="}],"include_subdomains":true}, {"group":"wsp_coep","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coep-report?s=-Qd23NxB1zCUwZizH-epeRsRZgXloEdgdIpTxEGA5iBsdClG9db5uOwoTBiUdZWKIKTiSMZuoao="}],"include_subdomains":true}, {"group":"csp","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/csp-report-v2?q=-Qd23NxB1zCUwZizH-epeRsRZgXloEdgdIpTxEGA5iBsdClG9db5uOwoTBiUdZWKIKTiSMZuoao%3D&t=1"}],"include_subdomains":true}
reporting-endpoints: coop="https://q.stripe.com/coop-report", wsp_coop="https://q.stripe.com/coop-report?s=-Qd23NxB1zCUwZizH-epeRsRZgXloEdgdIpTxEGA5iBsdClG9db5uOwoTBiUdZWKIKTiSMZuoao=", wsp_coep="https://q.stripe.com/coep-report?s=-Qd23NxB1zCUwZizH-epeRsRZgXloEdgdIpTxEGA5iBsdClG9db5uOwoTBiUdZWKIKTiSMZuoao=", csp="https://q.stripe.com/csp-report-v2?q=-Qd23NxB1zCUwZizH-epeRsRZgXloEdgdIpTxEGA5iBsdClG9db5uOwoTBiUdZWKIKTiSMZuoao%3D&t=1"
request-id: req_sGUQ6pSYBMiTmP
stripe-action-id: iad1DwzaLgYyIglCu3dc4Bz
x-stripe-priority-routing-enabled: true
x-stripe-proxy-response: upstream
x-stripe-routing-context-priority-tier: livemode
x-stripe-server-rpc-duration-micros: 62702
x-wc: 3ff

Recommendations

Enable compression (gzip/brotli) to improve performance