Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 151.101.1.91 |
| Server Software | haproxy |
| CDN | CDN (MISS, HIT, HIT) |
| Compression | gzip |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 151.101.1.91
Server Software haproxy
CDN CDN (MISS, HIT, HIT)
Compression gzip
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://spreadshirt.net:443 | 301 | HTTP/2 301 |
| 2 | https://www.spreadshirt.net/ | 200 | HTTP/2 200 |
#1 URL https://spreadshirt.net:443
HTTP Status Code 301
Status HTTP/2 301
#2 URL https://www.spreadshirt.net/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 14.5 ms |
| TCP Connect | 15.6 ms |
| TLS Handshake | 12.3 ms |
| Time To First Byte (TTFB) | 32.6 ms |
| Content Download | 1.7 ms |
| Total Response Time | 34.3 ms |
DNS Lookup 14.5 ms
TCP Connect 15.6 ms
TLS Handshake 12.3 ms
Time To First Byte (TTFB) 32.6 ms
Content Download 1.7 ms
Total Response Time 34.3 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000; includeSubDomains; preload |
| CSP | ⚠ Not configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ⚠ Not configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000; includeSubDomains; preload
CSP ⚠ Not configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ⚠ Not configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Welcome to Spreadshirt. Please select your region. |
| Meta Description | Spreadshirt international - please select your region to match your language and currency. |
| Canonical | https://www.spreadshirt.net/-Cgeneral/countrySelection |
| Robots Meta | index,follow |
| Open Graph Title | Welcome to Spreadshirt. Please select your region. |
| Open Graph Description | Spreadshirt international - please select your region to match your language and currency. |
| Open Graph Image | https://image.spreadshirtmedia.net/content/asset/sprd-log... |
Title Welcome to Spreadshirt. Please select your region. Meta Description Spreadshirt international - please select your region to match your language and currency. Canonical https://www.spreadshirt.net/-Cgeneral/countrySelection Robots Meta index,follow Open Graph Title Welcome to Spreadshirt. Please select your region. Open Graph Description Spreadshirt international - please select your region to match your language and currency. Open Graph Image https://image.spreadshirtmedia.net/content/asset/sprd-log... Detected Technologies
| Technology | Google Analytics Node.js |
Technology Google Analytics Node.js
HTTP Headers
| X-server-name
| marketplace_eu1 |
| Access-control-allow-headers
| X-PINGOTHER,Origin,X-Requested-With,Content-Type,Accept |
| Access-control-allow-methods
| GET, POST, OPTIONS, PUT |
| Access-control-allow-origin
| * |
| X-version
| 11.63.6_ae1e1e38e20caa519c812760a96393b6b2f5c839 |
| Access-control-max-age
| 86400 |
| Content-type
| text/html;charset=UTF-8 |
| Server
| haproxy |
| Link
| ; rel=preconnect |
| Via
| 1.1 varnish, 1.1 varnish, 1.1 varnish |
| Content-encoding
| gzip |
| Accept-ranges
| bytes |
| Date
| Wed, 22 Jul 2026 10:08:15 GMT |
| X-served-by
| cache-fra-etou8220066-FRA, cache-fra-etou8220066-FRA, cache-fra-etou8220066-FRA, cache-par-lfpg1960057-PAR |
| X-cache
| MISS, HIT, HIT |
| X-cache-hits
| 0, 1, 0 |
| X-timer
| S1784714895.021513,VS0,VE1 |
| X-trace-id
| ebd8b180addc9b3ade56da4d9d160b15 |
| Vary
| Cookie, Accept-Encoding |
| X-dns-prefetch-control
| on |
| Strict-transport-security
| max-age=31536000; includeSubDomains; preload |
| Server-timing
| HIT-CLUSTER, fastly;desc="Edge time";dur=1 |
| Timing-allow-origin
| * |
| X-xss-protection
| 1 |
| X-application
| marketplace |
| X-country
| FR |
| Content-security-policy-report-only
| default-src 'self' image.spreadshirtmedia.net ; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: *.go-mpulse.net apis.google.com assets.adobedtm.com *.cloudfront.net nxtck.com ssl.gstatic.com ws.sessioncam.com *.spreadshirt.net *.spreadshirt.com www.google-analytics.com www.google.com googleads.g.doubleclick.net connect.facebook.net www.googleadservices.com adtm.spreadshirts.net *.spreadshirt.net ; img-src 'self' data: https: image.spreadshirtmedia.net *.gstatic.com rtb-csync.smartadserver.com pixel.rubiconproject.com pixel.advertising.com dsum-sec.casalemedia.com cotads.adscale.de www.google-analytics.com eu-u.openx.net ih.adscale.de *.akstat.io www.facebook.com dsum-sec.casalemedia.com ad.yieldlab.net secure.adnxs.com mapping.nxtck.com stats.g.doubleclick.net www.google.com www.google.de cm.g.doubleclick.net ads.yahoo.com sync.ligadx.com eb2.3lift.com s.sspqns.com x.bidswitch.net image2.pubmatic.com sync.outbrain.com nxtck.com *.google-analytics.com *.analytics.google.com *.zdassets.com sanalytics.spreadshirt.net *.spreadshirt.net ; connect-src 'self' https: *.spreadshirt.net *.spreadshirt.com www.google-analytics.com www.google.com *.go-mpulse.net *.akstat.io/ dpm.demdex.net *.google-analytics.com *.analytics.google.com wss://*.zendesk.com *.spreadshirt.net ; font-src 'self' https: data: *.spreadshirt.net ; style-src 'self' data: 'unsafe-inline' https: *.spreadshirt.net ; object-src 'none' ; media-src image.spreadshirtmedia.net ; frame-src 'self' https: www.google.com accounts.google.com *.spreadshirt.net ; report-uri https://csp.spreadshirts.net/csp/reportOnly ; |
| Set-cookie
| _sa=sa.1.0798209201.1784714895; domain=spreadshirt.net; expires=Fri, 21 Aug 2026 10:08:15 GMT; path=/; secure; SameSite=None; |
| Cache-control
| no-transform, max-age=60, must-revalidate, private |
| Alt-svc
| h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 |
| Content-length
| 35594 |
Meta Tags
| Viewport | width=device-width, initial-scale=1.0, maximum-scale=5.0, user-scalable=yes, minimal-ui |
| Description | Spreadshirt international - please select your region to match your language and currency. |
| Thumbnail |  |
| Robots | index,follow |
X-server-name marketplace_eu1
Access-control-allow-headers X-PINGOTHER,Origin,X-Requested-With,Content-Type,Accept
Access-control-allow-methods GET, POST, OPTIONS, PUT
Access-control-allow-origin *
X-version 11.63.6_ae1e1e38e20caa519c812760a96393b6b2f5c839
Access-control-max-age 86400
Content-type text/html;charset=UTF-8
Server haproxy
Link ; rel=preconnect
Via 1.1 varnish, 1.1 varnish, 1.1 varnish
Content-encoding gzip
Accept-ranges bytes
Date Wed, 22 Jul 2026 10:08:15 GMT
X-served-by cache-fra-etou8220066-FRA, cache-fra-etou8220066-FRA, cache-fra-etou8220066-FRA, cache-par-lfpg1960057-PAR
X-cache MISS, HIT, HIT
X-cache-hits 0, 1, 0
X-timer S1784714895.021513,VS0,VE1
X-trace-id ebd8b180addc9b3ade56da4d9d160b15
Vary Cookie, Accept-Encoding
X-dns-prefetch-control on
Strict-transport-security max-age=31536000; includeSubDomains; preload
Server-timing HIT-CLUSTER, fastly;desc="Edge time";dur=1
Timing-allow-origin *
X-xss-protection 1
X-application marketplace
X-country FR
Content-security-policy-report-only default-src 'self' image.spreadshirtmedia.net ; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: *.go-mpulse.net apis.google.com assets.adobedtm.com *.cloudfront.net nxtck.com ssl.gstatic.com ws.sessioncam.com *.spreadshirt.net *.spreadshirt.com www.google-analytics.com www.google.com googleads.g.doubleclick.net connect.facebook.net www.googleadservices.com adtm.spreadshirts.net *.spreadshirt.net ; img-src 'self' data: https: image.spreadshirtmedia.net *.gstatic.com rtb-csync.smartadserver.com pixel.rubiconproject.com pixel.advertising.com dsum-sec.casalemedia.com cotads.adscale.de www.google-analytics.com eu-u.openx.net ih.adscale.de *.akstat.io www.facebook.com dsum-sec.casalemedia.com ad.yieldlab.net secure.adnxs.com mapping.nxtck.com stats.g.doubleclick.net www.google.com www.google.de cm.g.doubleclick.net ads.yahoo.com sync.ligadx.com eb2.3lift.com s.sspqns.com x.bidswitch.net image2.pubmatic.com sync.outbrain.com nxtck.com *.google-analytics.com *.analytics.google.com *.zdassets.com sanalytics.spreadshirt.net *.spreadshirt.net ; connect-src 'self' https: *.spreadshirt.net *.spreadshirt.com www.google-analytics.com www.google.com *.go-mpulse.net *.akstat.io/ dpm.demdex.net *.google-analytics.com *.analytics.google.com wss://*.zendesk.com *.spreadshirt.net ; font-src 'self' https: data: *.spreadshirt.net ; style-src 'self' data: 'unsafe-inline' https: *.spreadshirt.net ; object-src 'none' ; media-src image.spreadshirtmedia.net ; frame-src 'self' https: www.google.com accounts.google.com *.spreadshirt.net ; report-uri https://csp.spreadshirts.net/csp/reportOnly ;
Set-cookie _sa=sa.1.0798209201.1784714895; domain=spreadshirt.net; expires=Fri, 21 Aug 2026 10:08:15 GMT; path=/; secure; SameSite=None;
Cache-control no-transform, max-age=60, must-revalidate, private
Alt-svc h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Content-length 35594
