Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 37.46.142.226 |
| Server Software | nginx |
| CDN | CDN |
| Compression | gzip |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 37.46.142.226
Server Software nginx
CDN CDN
Compression gzip
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://giant-bicycles.com:443 | 301 | HTTP/2 301 |
| 2 | https://www.giant-bicycles.com/ | 302 | HTTP/2 302 |
| 3 | https://www.giant-bicycles.com/global | 200 | HTTP/2 200 |
#1 URL https://giant-bicycles.com:443
HTTP Status Code 301
Status HTTP/2 301
#2 URL https://www.giant-bicycles.com/
HTTP Status Code 302
Status HTTP/2 302
#3 URL https://www.giant-bicycles.com/global
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 5.3 ms |
| TCP Connect | 18.6 ms |
| TLS Handshake | 17.7 ms |
| Time To First Byte (TTFB) | 93.3 ms |
| Content Download | 0.5 ms |
| Total Response Time | 93.8 ms |
DNS Lookup 5.3 ms
TCP Connect 18.6 ms
TLS Handshake 17.7 ms
Time To First Byte (TTFB) 93.3 ms
Content Download 0.5 ms
Total Response Time 93.8 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=15552001; includeSubDomains |
| CSP | ⚠ Not configured |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| Permissions Policy | ✔ Configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=15552001; includeSubDomains
CSP ⚠ Not configured
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
Permissions Policy ✔ Configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Giant Bicycles | The world’s leading brand of bicycles and cycling gear |
Title Giant Bicycles | The world’s leading brand of bicycles and cycling gear
Detected Technologies
| Technology | jQuery Google Analytics Google Tag Manager Nginx |
Technology jQuery Google Analytics Google Tag Manager Nginx
HTTP Headers
| Server
| nginx |
| Date
| Wed, 26 Aug 2026 12:40:09 GMT |
| Content-type
| text/html; charset=utf-8 |
| Vary
| Accept-Encoding |
| Cache-control
| public, max-age=14400 |
| Expires
| Wed, 26 Aug 2026 14:59:03 GMT |
| Last-modified
| Wed, 26 Aug 2026 10:59:03 GMT |
| Request-context
| appId=cid-v1:bcbdd0de-c1e2-42db-800f-95f4bbafeac3 |
| Access-control-expose-headers
| Request-Context |
| Access-control-allow-credentials
| true |
| Access-control-allow-methods
| POST, GET, DELETE |
| Access-control-allow-headers
| Origin, X-Requested-With, Content-Type, Accept |
| Strict-transport-security
| max-age=15552001; includeSubDomains |
| X-content-type-options
| nosniff |
| Referrer-policy
| strict-origin-when-cross-origin |
| Permissions-policy
| accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=('src'), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), speaker-selection=(), conversion-measurement=(), focus-without-user-activation=(), hid=(), idle-detection=(), interest-cohort=(), serial=(), sync-script=(), trust-token-redemption=(), unload=(), window-placement=(), vertical-scroll=() |
| X-frame-options
| SAMEORIGIN |
| X-cache-status
| HIT |
| X-debug-message
| FR | | 16509 |
| Content-encoding
| gzip |
Server nginx
Date Wed, 26 Aug 2026 12:40:09 GMT
Content-type text/html; charset=utf-8
Vary Accept-Encoding
Cache-control public, max-age=14400
Expires Wed, 26 Aug 2026 14:59:03 GMT
Last-modified Wed, 26 Aug 2026 10:59:03 GMT
Request-context appId=cid-v1:bcbdd0de-c1e2-42db-800f-95f4bbafeac3
Access-control-expose-headers Request-Context
Access-control-allow-credentials true
Access-control-allow-methods POST, GET, DELETE
Access-control-allow-headers Origin, X-Requested-With, Content-Type, Accept
Strict-transport-security max-age=15552001; includeSubDomains
X-content-type-options nosniff
Referrer-policy strict-origin-when-cross-origin
Permissions-policy accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=('src'), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), speaker-selection=(), conversion-measurement=(), focus-without-user-activation=(), hid=(), idle-detection=(), interest-cohort=(), serial=(), sync-script=(), trust-token-redemption=(), unload=(), window-placement=(), vertical-scroll=()
X-frame-options SAMEORIGIN
X-cache-status HIT
X-debug-message FR | | 16509
Content-encoding gzip
