Informations Techniques
| Code de Statut HTTP | 200 |
| Version HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Adresse IP | 13.227.231.117 |
| Logiciel Serveur | nginx |
| Compression | gzip |
Code de Statut HTTP 200
Version HTTP HTTP/1.1
HTTPS ✔ Disponible
Adresse IP 13.227.231.117
Logiciel Serveur nginx
Compression gzip
Chaîne de Redirection
| # | URL | Code de Statut HTTP | Statut |
| 1 | https://onemaininsurance.com:443 | 301 | HTTP/2 301 |
| 2 | https://www.onemainsolutions.com/ | 200 | HTTP/2 200 |
#1 URL https://onemaininsurance.com:443
Code de Statut HTTP 301
Statut HTTP/2 301
#2 URL https://www.onemainsolutions.com/
Code de Statut HTTP 200
Statut HTTP/2 200
Performance
| Résolution DNS | 17.9 ms |
| Connexion TCP | 100.6 ms |
| Négociation TLS | 86 ms |
| Temps Jusqu'au Premier Octet (TTFB) | 398.8 ms |
| Téléchargement du Contenu | 0.1 ms |
| Temps de Réponse Total | 398.9 ms |
Résolution DNS 17.9 ms
Connexion TCP 100.6 ms
Négociation TLS 86 ms
Temps Jusqu'au Premier Octet (TTFB) 398.8 ms
Téléchargement du Contenu 0.1 ms
Temps de Réponse Total 398.9 ms
Sécurité
| HTTPS | ✔ Activé |
| HSTS | ✔ max-age=31536000; includeSubDomains; preload |
| CSP | ✔ Configuré |
| X-Frame-Options | ✔ sameorigin |
| X-Content-Type-Options | ✔ nosniff |
| Politique de Permissions | ✔ Configuré |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activé
HSTS ✔ max-age=31536000; includeSubDomains; preload
CSP ✔ Configuré
X-Frame-Options ✔ sameorigin
X-Content-Type-Options ✔ nosniff
Politique de Permissions ✔ Configuré
HTTP/2 ⚠ HTTP/1.1
Vérification SEO Rapide
Titre OneMain Solutions
Technologies Détectées
| Technologie | Google Analytics Nginx |
Technologie Google Analytics Nginx
En-têtes HTTP
| Date
| Tue, 28 Jul 2026 04:25:43 GMT |
| Content-type
| text/html; charset=utf-8 |
| Server
| nginx |
| Vary
| Accept-Encoding |
| Permissions-policy
| camera=(), gyroscope=(), microphone=(), usb=() ,fullscreen=(self), payment=() |
| X-sha
| 1a1df85ecf472946cf2f512d6cba55bd9f726313 |
| Link
| ; rel=preload; as=script; nopush,; rel=preload; as=style; nopush,; rel=preload; as=style; nopush,; rel=preload; as=script; integrity=sha256-OqMp1AztbKknoOvOIctRa94JgC50llncl8ezyKG9slE=; nopush,; rel=preload; as=script; integrity=sha256-lSKnnAyfcz3LrW27/1CRM+t6hTcSAJExerfouxb4KaM=; nopush,; rel=preload; as=script; integrity=sha256-ebw47X1hPEc4q3Eh7FwiUX1pOhMkeSb2Js5dogHXIp0=; nopush |
| Etag
| W/"9ceaeafc77ac7e61c1449dfd15d0f8ef" |
| Cache-control
| private, no-store, no-cache |
| Set-cookie
| _insurance_session=rl0HqWn2ejH1MzykUmWxpTPAx%2F%2B%2FBCxk7Z86eH0vKNhqNkznTdtfy%2Bd27V0zMCNFuZO2PvcrKBMFoB9tzYgyv%2FznjMFZuxM2WYo5flIAke9lUAzsuaKvjxG0zyM%2FSAiVVAC%2FnXFqEJJ0pgjxTXXDmCxTmN8GjXRh0PTuvCKfKZcIKiC%2BoUWcia9nJg8gjWDWIG3iDyEHqV5u8zcE4J3RYI30lSTQ3hAcxMtBesjb%2Buzm8mgkLhxCYv3PbG0oc7Djh%2BjINLA37Wd3T1PbLqTFmgTXAnEb9PwhrwrYjQZl43uVzfFcjMQ8zWbgQ4bZ%2BFnqkiJhRrE9KTE7APHqBkyOtmH45axO0%2BwsZ70ruWTNTphXqfMtUmcpcipkG6vV%2BVcbfeLNfHTON8etzYFwdfVofnuGR%2BZmZhg9PL8lFqET1i6Raw2z6qateKdAV1qjMINYHlWUR7dgIHeQwKOO5npvgnF4174DkusbLXACN2E5pqkD8ngitgjBHPvNSynA0AHX5HEaCVFogAU5jzvF8ZRFMVr9L4plIVPNE5xszHMYiWrjlWpNcN3Zdd3DldEXKUIQiU7potU0mBM%2FnJAv7Dyd7bn0X1XKbjEsHh0xrPJES1CSvFT4sFjNCqwVqlG4EfQUQgQ%3D--Oj%2BU9jQYZAXy7gjM--hATMpBRynhSeVY3oev0Q6Q%3D%3D; path=/; secure; HttpOnly; SameSite=Lax |
| X-request-id
| 4d065d394d72bd87727d205fc8d9eded |
| X-runtime
| 0.116719 |
| X-frame-options
| sameorigin |
| X-content-type-options
| nosniff |
| X-xss-protection
| 1; mode=block |
| X-download-options
| noopen |
| X-permitted-cross-domain-policies
| master-only |
| Content-security-policy
| default-src https: 'self'; child-src https: 'self'; connect-src https: 'self' wws: wss:; font-src https: 'self' data:; frame-ancestors 'none'; img-src https: 'self' data:; script-src https: 'self' 'unsafe-inline' 'unsafe-eval' data:; style-src https: 'self' 'unsafe-inline' |
| Pragma
| no-cache |
| Content-encoding
| gzip |
| Strict-transport-security
| max-age=31536000; includeSubDomains; preload |
Balises Meta
| Csrf-param | authenticity_token |
| Csrf-token | WS4d1LS7lZjGOoUm8g06IPdo8C6Is0Q-HPuekLJgPaNpZyIrmpaF0K26V29z-9OHUL41KG0p79V4l-JHGDKvhQ |
Date Tue, 28 Jul 2026 04:25:43 GMT
Content-type text/html; charset=utf-8
Server nginx
Vary Accept-Encoding
Permissions-policy camera=(), gyroscope=(), microphone=(), usb=() ,fullscreen=(self), payment=()
X-sha 1a1df85ecf472946cf2f512d6cba55bd9f726313
Link ; rel=preload; as=script; nopush,; rel=preload; as=style; nopush,; rel=preload; as=style; nopush,; rel=preload; as=script; integrity=sha256-OqMp1AztbKknoOvOIctRa94JgC50llncl8ezyKG9slE=; nopush,; rel=preload; as=script; integrity=sha256-lSKnnAyfcz3LrW27/1CRM+t6hTcSAJExerfouxb4KaM=; nopush,; rel=preload; as=script; integrity=sha256-ebw47X1hPEc4q3Eh7FwiUX1pOhMkeSb2Js5dogHXIp0=; nopush
Etag W/"9ceaeafc77ac7e61c1449dfd15d0f8ef"
Cache-control private, no-store, no-cache
Set-cookie _insurance_session=rl0HqWn2ejH1MzykUmWxpTPAx%2F%2B%2FBCxk7Z86eH0vKNhqNkznTdtfy%2Bd27V0zMCNFuZO2PvcrKBMFoB9tzYgyv%2FznjMFZuxM2WYo5flIAke9lUAzsuaKvjxG0zyM%2FSAiVVAC%2FnXFqEJJ0pgjxTXXDmCxTmN8GjXRh0PTuvCKfKZcIKiC%2BoUWcia9nJg8gjWDWIG3iDyEHqV5u8zcE4J3RYI30lSTQ3hAcxMtBesjb%2Buzm8mgkLhxCYv3PbG0oc7Djh%2BjINLA37Wd3T1PbLqTFmgTXAnEb9PwhrwrYjQZl43uVzfFcjMQ8zWbgQ4bZ%2BFnqkiJhRrE9KTE7APHqBkyOtmH45axO0%2BwsZ70ruWTNTphXqfMtUmcpcipkG6vV%2BVcbfeLNfHTON8etzYFwdfVofnuGR%2BZmZhg9PL8lFqET1i6Raw2z6qateKdAV1qjMINYHlWUR7dgIHeQwKOO5npvgnF4174DkusbLXACN2E5pqkD8ngitgjBHPvNSynA0AHX5HEaCVFogAU5jzvF8ZRFMVr9L4plIVPNE5xszHMYiWrjlWpNcN3Zdd3DldEXKUIQiU7potU0mBM%2FnJAv7Dyd7bn0X1XKbjEsHh0xrPJES1CSvFT4sFjNCqwVqlG4EfQUQgQ%3D--Oj%2BU9jQYZAXy7gjM--hATMpBRynhSeVY3oev0Q6Q%3D%3D; path=/; secure; HttpOnly; SameSite=Lax
X-request-id 4d065d394d72bd87727d205fc8d9eded
X-runtime 0.116719
X-frame-options sameorigin
X-content-type-options nosniff
X-xss-protection 1; mode=block
X-download-options noopen
X-permitted-cross-domain-policies master-only
Content-security-policy default-src https: 'self'; child-src https: 'self'; connect-src https: 'self' wws: wss:; font-src https: 'self' data:; frame-ancestors 'none'; img-src https: 'self' data:; script-src https: 'self' 'unsafe-inline' 'unsafe-eval' data:; style-src https: 'self' 'unsafe-inline'
Pragma no-cache
Content-encoding gzip
Strict-transport-security max-age=31536000; includeSubDomains; preload
