Open
Cached
·
just now
20
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Basic
base-uri; default-src; script-src; +9 more
base-uri 'self'; default-src 'self' 'unsafe-inline' *.doubleclick.net www.facebook.com uk.cdn-net.com six.cdn-net.com *.analytics.google.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com stats.g.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.cookielaw.org *.google-analytics.com connect.facebook.net facebook.com cdn.jsdelivr.net *.doubleclick.net apps.bazaarvoice.com display.ugc.bazaarvoice.com *.pricespider.com *.mapbox.com stg.api.bazaarvoice.com mpsnare.iesnare.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ cdnjs.cloudflare.com/ajax/libs/socket.io/2.3.0/socket.io.slim.js cdnjs.cloudflare.com/ajax/libs/handlebars.js/3.0.3/handlebars.runtime.min.js cdnjs.cloudflare.com/ajax/libs/handlebars.js/3.0.3/handlebars.min.js *.googletagmanager.com *.adimo.co *.adimouat.co 4dvq37jqcg.execute-api.eu-west-1.amazonaws.com *.mikmak.ai *.swaven.com tagmanager.google.com stats.g.doubleclick.net c.amazon-adsystem.com apis.google.com *.clarity.ms; style-src 'self' 'unsafe-inline' fonts.googleapis.com display.ugc.bazaarvoice.com cdn.pricespider.com api.tiles.mapbox.com/mapbox-gl-js/v1.8.1/mapbox-gl.css *.mikmak.ai *.swaven.com *.google-analytics.com tagmanager.google.com; object-src 'none'; form-action 'self' www.facebook.com stg.api.bazaarvoice.com; font-src 'self' data: fonts.gstatic.com *.mikmak.ai *.swaven.com *.static-swaven.com; worker-src 'self' blob:; child-src blob:; connect-src 'self' api.contentstack.com eu-api.contentstack.com cdn.cookielaw.org geolocation.onetrust.com privacyportal-eu.onetrust.com cookies-data.onetrust.io *.googleapis.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.doubleclick.net *.google.com stats.g.doubleclick.net api.evrythng.io sgtm.durex.es/ phx-promoplatform-api-pl-prod.promoplatform.rbcloud.io digital-lds-application-web-production.frankfurt.rbdigitalcloud.com ot-proxy-api-ch2-xdp265.m3jzw3-2.deu-c1.cloudhub.io ot-proxy-api-cf6r4v.m3jzw3-2.deu-c1.cloudhub.io *.algolia.net *.algolianet.com *.algolia.io *.gcp.cloud.es.io cognito-idp.eu-central-1.amazonaws.com stg.api.bazaarvoice.com *.pricespider.com *.tiles.mapbox.com api.mapbox.com events.mapbox.com identitytoolkit.googleapis.com firestore.googleapis.com securetoken.googleapis.com *.adimo.co *.adimouat.co 4dvq37jqcg.execute-api.eu-west-1.amazonaws.com *.mikmak.ai *.swaven.com facebook.com connect.facebook.net eu-rest-preview.contentstack.com api.evrythng.io *.clarity.ms; img-src 'self' data: eu-images.contentstack.com images.salsify.com cdn.cookielaw.org optanon.blob.core.windows.net www.facebook.com www.google.com www.google.pl network-stg-a.bazaarvoice.com *.pricespider.com cdn.jsdelivr.net/gh/lipis/ *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.google.com *.doubleclick.net *.mikmak.ai *.swaven.com *.static-swaven.com stats.g.doubleclick.net ssl.gstatic.com storage.googleapis.com *.bing.com *.clarity.ms; frame-src www.tiktok.com www.instagram.com www.facebook.com www.youtube.com www.youtube-nocookie.com develop.dtukelhhqa2x2.amplifyapp.com main.dtukelhhqa2x2.amplifyapp.com www.google.com/recaptcha/ recaptcha.google.com/recaptcha/ display.ugc.bazaarvoice.com stg.api.bazaarvoice.com *.doubleclick.net *.adimo.co *.adimouat.co *.mikmak.ai *.swaven.com *.contact-us-reckitt.com *.contentstack.com cdn.shopify.com
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
camera=(self), geolocation=(self), accelerometer=(self), gyroscope=(self), magnetometer=(self), microphone=(self)
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
Performance Headers
3 headers
Accept-Ranges
Performance
bytes
Connection
Performance
close
Vary
Performance
x-fh-requested-host, accept-encoding
Caching Headers
3 headers
Cache-Control
Caching
public, max-age=0, must-revalidate
Etag
Caching
"ae64d0367db7d5752b986ef6280bf05023be34951a580341fcd86e95a8cfd83f"
Last-Modified
Caching
Wed, 17 Dec 2025 15:41:04 GMT
Content Headers
2 headers
Content-Length
Content
1207354
Content-Type
Content
text/html; charset=utf-8
Server Headers
0 headers
No server headers found
CORS Headers
0 headers
No CORS headers found
Cookies Headers
0 headers
No cookies headers found
Other Headers
6 headers
Alt-Svc
Other
h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Date
Other
Sun, 28 Dec 2025 20:02:50 GMT
X-Cache
Other
HIT
X-Cache-Hits
Other
0
X-Served-By
Other
cache-pdk-kfty8610082-PDK
X-Timer
Other
S1766952170.346365,VS0,VE1
Recommendations
Enable compression (gzip/brotli) to improve performance
Analysis completed in 635ms