HTTP Headers Analysis for https://www.onelink.com

Detected Technologies from Headers

See all in URL Inspect 3

AWS

Nginx

Stripe

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Strong

base-uri; connect-src; default-src; +12 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

Performance Headers

Connection

Performance

close

connection: close

Caching Headers

Cache-Control

Caching

public, max-age=900

cache-control: public, max-age=900

Content Headers

Content-Length

Content

140424

Content-Type

Content

text/html; charset=utf-8

content-length: 140424
content-type: text/html; charset=utf-8

Server Headers

Server

nginx

server: nginx

CORS Headers

No CORS headers found

Cookies Headers

No cookies headers found

Other Headers

Date

Other

Mon, 03 Aug 2026 18:52:13 GMT

Report-To

Other

Group coop max-age: 2h

Endpoint 1 https://q.stripe.com/coop-report

Group wsp_coop max-age: 2h

Endpoint 1 https://q.stripe.com/coop-report?s=Jcz-jYH020_tRp4CTm4vmTZkM0KWV7gOKedHGcAa3yxxEwt1lIVE7JW1RDcguMRAOITU9A==

Group wsp_coep max-age: 2h

Endpoint 1 https://q.stripe.com/coep-report?s=Jcz-jYH020_tRp4CTm4vmTZkM0KWV7gOKedHGcAa3yxxEwt1lIVE7JW1RDcguMRAOITU9A==

Group csp max-age: 2h

Endpoint 1 https://q.stripe.com/csp-report-v2?q=Jcz-jYH020_tRp4CTm4vmTZkM0KWV7gOKedHGcAa3yxxEwt1lIVE7JW1RDcguMRAOITU9A%3D%3D&t=1

Reporting-Endpoints

Other

coop="https://q.stripe.com/coop-report", wsp_coop="https://q.stripe.com/coop-report?s=Jcz-jYH020_tRp4CTm4vmTZkM0KWV7gOKedHGcAa3yxxEwt1lIVE7JW1RDcguMRAOITU9A==", wsp_coep="https://q.stripe.com/coep-report?s=Jcz-jYH020_tRp4CTm4vmTZkM0KWV7gOKedHGcAa3yxxEwt1lIVE7JW1RDcguMRAOITU9A==", csp="https://q.stripe.com/csp-report-v2?q=Jcz-jYH020_tRp4CTm4vmTZkM0KWV7gOKedHGcAa3yxxEwt1lIVE7JW1RDcguMRAOITU9A%3D%3D&t=1"

X-Stripe-Proxy-Response

Other

upstream

X-Stripe-Routing-Context-Override-Upstream-Bg-Target-Side-Link-Mkt-Srv

Other

green

X-Stripe-Server-Rpc-Duration-Micros

Other

52382

X-Wc

Other

3ff

date: Mon, 03 Aug 2026 18:52:13 GMT
report-to: {"group":"coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report"}],"include_subdomains":true}, {"group":"wsp_coop","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coop-report?s=Jcz-jYH020_tRp4CTm4vmTZkM0KWV7gOKedHGcAa3yxxEwt1lIVE7JW1RDcguMRAOITU9A=="}],"include_subdomains":true}, {"group":"wsp_coep","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/coep-report?s=Jcz-jYH020_tRp4CTm4vmTZkM0KWV7gOKedHGcAa3yxxEwt1lIVE7JW1RDcguMRAOITU9A=="}],"include_subdomains":true}, {"group":"csp","max_age":8640,"endpoints":[{"url":"https://q.stripe.com/csp-report-v2?q=Jcz-jYH020_tRp4CTm4vmTZkM0KWV7gOKedHGcAa3yxxEwt1lIVE7JW1RDcguMRAOITU9A%3D%3D&t=1"}],"include_subdomains":true}
reporting-endpoints: coop="https://q.stripe.com/coop-report", wsp_coop="https://q.stripe.com/coop-report?s=Jcz-jYH020_tRp4CTm4vmTZkM0KWV7gOKedHGcAa3yxxEwt1lIVE7JW1RDcguMRAOITU9A==", wsp_coep="https://q.stripe.com/coep-report?s=Jcz-jYH020_tRp4CTm4vmTZkM0KWV7gOKedHGcAa3yxxEwt1lIVE7JW1RDcguMRAOITU9A==", csp="https://q.stripe.com/csp-report-v2?q=Jcz-jYH020_tRp4CTm4vmTZkM0KWV7gOKedHGcAa3yxxEwt1lIVE7JW1RDcguMRAOITU9A%3D%3D&t=1"
x-stripe-proxy-response: upstream
x-stripe-routing-context-override-upstream-bg-target-side-link-mkt-srv: green
x-stripe-server-rpc-duration-micros: 52382
x-wc: 3ff

Recommendations

Enable compression (gzip/brotli) to improve performance