Open
Cached
·
just now
17
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
Content-Security-Policy
Basic
default-src; base-uri; connect-src; +11 more
default-src 'self';base-uri 'self';connect-src 'self' www.oogarden.com www.oogarden.be www.oogarden.de www.gardented.com www.oogarden.com:8091 www.oogarden.com:8092 www.gardented.com:8091 www.gardented.com:8092 *.76310.fr api.gls-group.net cdnjs.cloudflare.com *.facebook.com *.facebook.net *.iadvize.com *.datadome.co *.captcha-delivery.com *.pinterest.com bat.bing.com bat.bing.net www.google.com www.google.fr *.doubleclick.net pagead2.googlesyndication.com tss.oogarden.com www.googleadservices.com *.adtrafficquality.google *.analytics.google.com *.google-analytics.com *.tiktok.com *.tiktokw.us *.clarity.ms *.sensefuel.live;font-src 'self' cdn.oogarden.net cdn.gardented.net *.iadvize.com fonts.gstatic.com *.sensefuel.live;form-action 'self' sogecommerce.societegenerale.eu sherlocks-payment-webinit.secure.lcl.fr payment-webinit.mercanet.bnpparibas.net *.facebook.com *.facebook.net;frame-ancestors 'self' *.datadome.co *.captcha-delivery.com ooerpbi.oogarden.com:8124 ooerpbi.oogarden.com:8125 ooerp.oogarden.com:8124 ooerp.oogarden.com:8125 *.oogarden.com *.oogarden.be *.oogarden.de *.gardented.com cdn.oogarden.net cdn.gardented.net api.gls-group.net;frame-src 'self' media.oogarden.com cdn.oogarden.net cdn.gardented.net *.captcha-delivery.com api.gls-group.net *.facebook.com *.facebook.net *.pinterest.com www.google.com www.google.fr *.adtrafficquality.google pagead2.googlesyndication.com tss.oogarden.com www.googletagmanager.com www.youtube.com *.sensefuel.live;img-src 'self' data: media.oogarden.com cdn.oogarden.net cdn.gardented.net *.facebook.com *.facebook.net *.iadvize.com bat.bing.com bat.bing.net www.google.com www.google.fr *.analytics.google.com *.google-analytics.com www.googletagmanager.com *.adtrafficquality.google www.googleadservices.com *.doubleclick.net pagead2.googlesyndication.com *.openstreetmap.org t4.my-probance.one tss.oogarden.com i.ytimg.com *.sensefuel.live;media-src 'self' media.oogarden.com cdn.oogarden.net cdn.gardented.net *.sensefuel.live;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' www.oogarden.com www.oogarden.be www.oogarden.de www.gardented.com media.oogarden.com cdn.oogarden.net cdn.gardented.net *.76310.fr api.gls-group.net cdnjs.cloudflare.com *.facebook.com *.facebook.net *.iadvize.com *.datadome.co *.captcha-delivery.com bat.bing.com bat.bing.net cmodul.solutenetwork.com *.adtrafficquality.google *.doubleclick.net pagead2.googlesyndication.com *.analytics.google.com *.google-analytics.com t4.my-probance.one tss.oogarden.com www.google.com www.google.fr www.googletagmanager.com www.gstatic.com www.youtube.com *.pinterest.com *.tiktok.com *.tiktokw.us s.pinimg.com *.clarity.ms *.sensefuel.live;style-src 'self' 'unsafe-eval' 'unsafe-inline' media.oogarden.com cdn.oogarden.net cdn.gardented.net cdnjs.cloudflare.com fonts.googleapis.com *.iadvize.com www.googletagmanager.com *.sensefuel.live;upgrade-insecure-requests;worker-src 'self' blob:;
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
accelerometer=(self), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(self), gyroscope=(self), keyboard-map=(),magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(self), gamepad=(), speaker-selection=()
Recommendations
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
Performance Headers
1 headers
Transfer-Encoding
Performance
chunked
Caching Headers
2 headers
Cache-Control
Caching
no-store, must-revalidate, no-cache, max-age=0, private
Pragma
Caching
no-cache
Content Headers
1 headers
Content-Type
Content
text/html; charset=utf-8
Server Headers
1 headers
Server
Server
CORS Headers
0 headers
No CORS headers found
Cookies Headers
1 headers
Set-Cookie
Cookies
datadome=Y2XLX1VWrNsfnU5_QrDvR1bFfQAkB70mwCqa5IJmpk75~_7f_M~h~oEgqZa3lJ2OdkFhSmxWy0CCtZRgPJ9zqUeXu0p4XXnAt6swDrFUS6yuXLgFdldp7~2bZBAeTx35; Max-Age=31536000; Domain=.oogarden.com; Path=/; Secure; SameSite=Lax
Other Headers
6 headers
Accept-Ch
Other
Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Charset
Other
utf-8
Date
Other
Tue, 18 Nov 2025 05:56:48 GMT
X-Datadome
Other
protected
X-Datadome-Cid
Other
AHrlqAAAAAMADzG7kO04t4AAQCJRpQ==
X-Dd-B
Other
1
Recommendations
Enable compression (gzip/brotli) to improve performance
Analysis completed in 796ms