HTTP Headers Analysis for https://onelink.com

Detected Technologies from Headers

See all in URL Inspect 3

AWS

Nginx

Stripe

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Strong

base-uri; connect-src; default-src; +12 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

public, max-age=900

cache-control: public, max-age=900

Content Headers

Content-Length

Content

140265

Content-Type

Content

text/html; charset=utf-8

content-length: 140265
content-type: text/html; charset=utf-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Fri, 31 Jul 2026 04:46:34 GMT

Report-To

Other

Group coop max-age: 2h

Endpoint 1 https://q.stripe.com/coop-report

Group wsp_coop max-age: 2h

Endpoint 1 https://q.stripe.com/coop-report?s=4wJTHiDiTt2pCsVnCRWP5JJ_9yt0yLSVzCfloXc071iR6_SLdvCeT5FrHJGdAxRj7X4SiQ==

Group wsp_coep max-age: 2h

Endpoint 1 https://q.stripe.com/coep-report?s=4wJTHiDiTt2pCsVnCRWP5JJ_9yt0yLSVzCfloXc071iR6_SLdvCeT5FrHJGdAxRj7X4SiQ==

Group csp max-age: 2h

Endpoint 1 https://q.stripe.com/csp-report-v2?q=4wJTHiDiTt2pCsVnCRWP5JJ_9yt0yLSVzCfloXc071iR6_SLdvCeT5FrHJGdAxRj7X4SiQ%3D%3D&t=1

Reporting-Endpoints

Other

coop="https://q.stripe.com/coop-report", wsp_coop="https://q.stripe.com/coop-report?s=4wJTHiDiTt2pCsVnCRWP5JJ_9yt0yLSVzCfloXc071iR6_SLdvCeT5FrHJGdAxRj7X4SiQ==", wsp_coep="https://q.stripe.com/coep-report?s=4wJTHiDiTt2pCsVnCRWP5JJ_9yt0yLSVzCfloXc071iR6_SLdvCeT5FrHJGdAxRj7X4SiQ==", csp="https://q.stripe.com/csp-report-v2?q=4wJTHiDiTt2pCsVnCRWP5JJ_9yt0yLSVzCfloXc071iR6_SLdvCeT5FrHJGdAxRj7X4SiQ%3D%3D&t=1"

X-Stripe-Proxy-Response

Other

upstream

X-Stripe-Routing-Context-Override-Upstream-Bg-Target-Side-Link-Mkt-Srv

Other

green

X-Stripe-Server-Rpc-Duration-Micros

Other

43482

X-Wc

Other

3ff

date: Fri, 31 Jul 2026 04:46:34 GMT
report-to: {"group":"coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report"}],"include_subdomains":true}, {"group":"wsp_coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report?s=4wJTHiDiTt2pCsVnCRWP5JJ_9yt0yLSVzCfloXc071iR6_SLdvCeT5FrHJGdAxRj7X4SiQ=="}],"include_subdomains":true}, {"group":"wsp_coep","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coep-report?s=4wJTHiDiTt2pCsVnCRWP5JJ_9yt0yLSVzCfloXc071iR6_SLdvCeT5FrHJGdAxRj7X4SiQ=="}],"include_subdomains":true}, {"group":"csp","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/csp-report-v2?q=4wJTHiDiTt2pCsVnCRWP5JJ_9yt0yLSVzCfloXc071iR6_SLdvCeT5FrHJGdAxRj7X4SiQ%3D%3D&t=1"}],"include_subdomains":true}
reporting-endpoints: coop="https://q.stripe.com/coop-report", wsp_coop="https://q.stripe.com/coop-report?s=4wJTHiDiTt2pCsVnCRWP5JJ_9yt0yLSVzCfloXc071iR6_SLdvCeT5FrHJGdAxRj7X4SiQ==", wsp_coep="https://q.stripe.com/coep-report?s=4wJTHiDiTt2pCsVnCRWP5JJ_9yt0yLSVzCfloXc071iR6_SLdvCeT5FrHJGdAxRj7X4SiQ==", csp="https://q.stripe.com/csp-report-v2?q=4wJTHiDiTt2pCsVnCRWP5JJ_9yt0yLSVzCfloXc071iR6_SLdvCeT5FrHJGdAxRj7X4SiQ%3D%3D&t=1"
x-stripe-proxy-response: upstream
x-stripe-routing-context-override-upstream-bg-target-side-link-mkt-srv: green
x-stripe-server-rpc-duration-micros: 43482
x-wc: 3ff

Recommendations

Enable compression (gzip/brotli) to improve performance