CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵Missing X-Frame-Options
The site can be embedded in iframes by third parties (clickjacking risk).
HTTP Status Code200 HTTP VersionHTTP/1.1 HTTPS✔ Available IP Address208.91.196.46 Server Softwarenginx/1.28.0 Compressiongzip ℹ 🔵Missing Content Security PolicyCSP is not configured. It helps prevent XSS attacks and content injection. ℹ 🔵Missing X-Frame-OptionsThe site can be embedded in iframes by third parties (clickjacking risk).
Performance
DNS Lookup
156.1 ms
TCP Connect
277.2 ms
TLS Handshake
244.1 ms
Time To First Byte (TTFB)
702.2 ms
Content Download
0.1 ms
Total Response Time
702.2 ms
DNS Lookup156.1 ms TCP Connect277.2 ms TLS Handshake244.1 ms Time To First Byte (TTFB)702.2 ms Content Download0.1 ms Total Response Time702.2 ms
Security
HTTPS
✔ Enabled
HSTS
✔ max-age=63072000
CSP
⚠ Not configured
X-Frame-Options
⚠ Not configured
X-Content-Type-Options
⚠ Not configured
HTTP/2
⚠ HTTP/1.1
HTTPS✔ Enabled HSTS✔ max-age=63072000 CSP⚠ Not configured X-Frame-Options⚠ Not configured X-Content-Type-Options⚠ Not configured HTTP/2⚠ HTTP/1.1
Detected Technologies
Technology
Nginx
TechnologyNginx
HTTP Headers
Server
nginx/1.28.0
Date
Thu, 20 Aug 2026 05:24:47 GMT
Content-Type
text/html
Transfer-Encoding
chunked
Connection
keep-alive
X-exc
7
X-sc-h
21-w4gh
Via
1.1 google
Content-Encoding
gzip
Strict-Transport-Security
max-age=63072000
Servernginx/1.28.0 DateThu, 20 Aug 2026 05:24:47 GMT Content-Typetext/html Transfer-Encodingchunked Connectionkeep-alive X-exc7 X-sc-h21-w4gh Via1.1 google Content-Encodinggzip Strict-Transport-Securitymax-age=63072000
