Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 216.150.1.1 |
| Server Software | Vercel |
| CDN | Vercel |
| Compression | gzip |
|
🔄 🟡 Long Redirect Chain | There are 4 redirects, which may affect SEO and performance. |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 216.150.1.1
Server Software Vercel
CDN Vercel
Compression gzip
🔄 🟡 Long Redirect Chain There are 4 redirects, which may affect SEO and performance.
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://om.net:443 | 307 | HTTP/2 307 |
| 2 | https://om.net/en | 308 | HTTP/2 308 |
| 3 | https://www.om.fr/ | 307 | HTTP/2 307 |
| 4 | https://www.om.fr/en | 200 | HTTP/2 200 |
#1 URL https://om.net:443
HTTP Status Code 307
Status HTTP/2 307
#2 URL https://om.net/en
HTTP Status Code 308
Status HTTP/2 308
#3 URL https://www.om.fr/
HTTP Status Code 307
Status HTTP/2 307
#4 URL https://www.om.fr/en
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 4.1 ms |
| TCP Connect | 4.8 ms |
| TLS Handshake | 5.6 ms |
| Time To First Byte (TTFB) | 42.1 ms |
| Content Download | 20.6 ms |
| Total Response Time | 62.7 ms |
DNS Lookup 4.1 ms
TCP Connect 4.8 ms
TLS Handshake 5.6 ms
Time To First Byte (TTFB) 42.1 ms
Content Download 20.6 ms
Total Response Time 62.7 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=63072000 |
| CSP | ⚠ Not configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| Permissions Policy | ✔ Configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=63072000
CSP ⚠ Not configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
Permissions Policy ✔ Configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Olympique de Marseille |
| Meta Description | Live the passion of Olympique de Marseille. Find the latest news, match highlights, ticketing and the official store. Droit au But! |
| Open Graph Title | Olympique de Marseille |
| Open Graph Description | Live the passion of Olympique de Marseille. Find the latest news, match highlights, ticketing and the official store. Droit au But! |
| Open Graph Image | https://cdn.sanity.io/images/2omis1jj/production/e4883c91... |
| Twitter Card | summary_large_image |
| Twitter Title | Olympique de Marseille |
| Twitter Description | Live the passion of Olympique de Marseille. Find the latest news, match highlights, ticketing and the official store. Droit au But! |
| Twitter Image | https://cdn.sanity.io/images/2omis1jj/production/e4883c91... |
Title Olympique de Marseille Meta Description Live the passion of Olympique de Marseille. Find the latest news, match highlights, ticketing and the official store. Droit au But! Open Graph Title Olympique de Marseille Open Graph Description Live the passion of Olympique de Marseille. Find the latest news, match highlights, ticketing and the official store. Droit au But! Open Graph Image https://cdn.sanity.io/images/2omis1jj/production/e4883c91... Twitter Card summary_large_image Twitter Title Olympique de Marseille Twitter Description Live the passion of Olympique de Marseille. Find the latest news, match highlights, ticketing and the official store. Droit au But! Twitter Image https://cdn.sanity.io/images/2omis1jj/production/e4883c91... Detected Technologies
| Technology | React Google Analytics Google Tag Manager Next.js |
Technology React Google Analytics Google Tag Manager Next.js
HTTP Headers
| Age
| 82 |
| Cache-control
| public, max-age=0, must-revalidate |
| Content-encoding
| gzip |
| Content-security-policy-report-only
| default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https://om-sanity.vercel.app; form-action 'self' https://sso.om.fr; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.vercel-scripts.com https://*.vercel-insights.com https://www.googletagmanager.com https://*.google-analytics.com https://geo.dailymotion.com https://*.dailymotion.com https://platform.twitter.com https://player.twitch.tv https://*.twitch.tv https://www.youtube.com https://integrate.thetaedgecloud.com https://marseille.app.saytv.net https://*.saytv.net https://*.saytv.sq1.io https://*.reachfive.net https://sso.om.fr; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://cdn.sanity.io https://*.public.blob.vercel-storage.com https://flagcdn.com https://*.dailymotion.com https://*.twimg.com https://*.ytimg.com https://www.googletagmanager.com https://*.google-analytics.com https://*.jtvnw.net; connect-src 'self' https://*.vercel-insights.com https://*.vercel-scripts.com https://*.google-analytics.com https://www.googletagmanager.com https://cdn.sanity.io https://*.api.sanity.io https://*.apicdn.sanity.io https://*.public.blob.vercel-storage.com https://*.dailymotion.com https://*.twitch.tv https://marseille.app.saytv.net https://*.saytv.net https://*.saytv.sq1.io wss://marseille.app.saytv.net wss://*.saytv.net wss://*.saytv.sq1.io https://integrate.thetaedgecloud.com https://*.reachfive.net https://sso.om.fr; frame-src 'self' https://geo.dailymotion.com https://*.dailymotion.com https://player.twitch.tv https://*.twitch.tv https://www.youtube.com https://www.youtube-nocookie.com https://platform.twitter.com https://*.twitter.com https://www.helloasso.com https://*.helloasso.com https://integrate.thetaedgecloud.com https://marseille.app.saytv.net https://*.saytv.net https://*.saytv.sq1.io https://www.googletagmanager.com https://sso.om.fr; media-src 'self' blob: data: https://*.dailymotion.com https://*.public.blob.vercel-storage.com https://cdn.sanity.io; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests |
| Content-type
| text/html; charset=utf-8 |
| Cross-origin-opener-policy
| same-origin |
| Date
| Sun, 30 Aug 2026 16:49:44 GMT |
| Link
| ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2" |
| Permissions-policy
| camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=() |
| Referrer-policy
| strict-origin-when-cross-origin |
| Server
| Vercel |
| Strict-transport-security
| max-age=63072000 |
| Vary
| rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch |
| X-content-type-options
| nosniff |
| X-dns-prefetch-control
| off |
| X-matched-path
| /en |
| X-nextjs-prerender
| 1 |
| X-nextjs-stale-time
| 300 |
| X-powered-by
| Next.js |
| X-vercel-cache
| HIT |
| X-vercel-id
| cdg1::fra1::ngxm4-1788108667207-10476bc47920 |
Meta Tags
| Viewport | width=device-width, initial-scale=1 |
| Description | Live the passion of Olympique de Marseille. Find the latest news, match highlights, ticketing and the official store. Droit au But! |
Age 82
Cache-control public, max-age=0, must-revalidate
Content-encoding gzip
Content-security-policy-report-only default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https://om-sanity.vercel.app; form-action 'self' https://sso.om.fr; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.vercel-scripts.com https://*.vercel-insights.com https://www.googletagmanager.com https://*.google-analytics.com https://geo.dailymotion.com https://*.dailymotion.com https://platform.twitter.com https://player.twitch.tv https://*.twitch.tv https://www.youtube.com https://integrate.thetaedgecloud.com https://marseille.app.saytv.net https://*.saytv.net https://*.saytv.sq1.io https://*.reachfive.net https://sso.om.fr; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://cdn.sanity.io https://*.public.blob.vercel-storage.com https://flagcdn.com https://*.dailymotion.com https://*.twimg.com https://*.ytimg.com https://www.googletagmanager.com https://*.google-analytics.com https://*.jtvnw.net; connect-src 'self' https://*.vercel-insights.com https://*.vercel-scripts.com https://*.google-analytics.com https://www.googletagmanager.com https://cdn.sanity.io https://*.api.sanity.io https://*.apicdn.sanity.io https://*.public.blob.vercel-storage.com https://*.dailymotion.com https://*.twitch.tv https://marseille.app.saytv.net https://*.saytv.net https://*.saytv.sq1.io wss://marseille.app.saytv.net wss://*.saytv.net wss://*.saytv.sq1.io https://integrate.thetaedgecloud.com https://*.reachfive.net https://sso.om.fr; frame-src 'self' https://geo.dailymotion.com https://*.dailymotion.com https://player.twitch.tv https://*.twitch.tv https://www.youtube.com https://www.youtube-nocookie.com https://platform.twitter.com https://*.twitter.com https://www.helloasso.com https://*.helloasso.com https://integrate.thetaedgecloud.com https://marseille.app.saytv.net https://*.saytv.net https://*.saytv.sq1.io https://www.googletagmanager.com https://sso.om.fr; media-src 'self' blob: data: https://*.dailymotion.com https://*.public.blob.vercel-storage.com https://cdn.sanity.io; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests
Content-type text/html; charset=utf-8
Cross-origin-opener-policy same-origin
Date Sun, 30 Aug 2026 16:49:44 GMT
Link ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2"
Permissions-policy camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), accelerometer=(), interest-cohort=()
Referrer-policy strict-origin-when-cross-origin
Server Vercel
Strict-transport-security max-age=63072000
Vary rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
X-content-type-options nosniff
X-dns-prefetch-control off
X-matched-path /en
X-nextjs-prerender 1
X-nextjs-stale-time 300
X-powered-by Next.js
X-vercel-cache HIT
X-vercel-id cdg1::fra1::ngxm4-1788108667207-10476bc47920
