Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 13.227.173.91 |
| CDN | CDN (Miss from cloudfront) |
| Compression | gzip |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 13.227.173.91
CDN CDN (Miss from cloudfront)
Compression gzip
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://niftygateway.com:443 | 302 | HTTP/2 302 |
| 2 | https://www.niftygateway.com/ | 200 | HTTP/2 200 |
#1 URL https://niftygateway.com:443
HTTP Status Code 302
Status HTTP/2 302
#2 URL https://www.niftygateway.com/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 28.8 ms |
| TCP Connect | 29.8 ms |
| TLS Handshake | 5.5 ms |
| Time To First Byte (TTFB) | 164.8 ms |
| Content Download | 0.2 ms |
| Total Response Time | 165 ms |
DNS Lookup 28.8 ms
TCP Connect 29.8 ms
TLS Handshake 5.5 ms
Time To First Byte (TTFB) 164.8 ms
Content Download 0.2 ms
Total Response Time 165 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=15552000; includeSubDomains |
| CSP | ⚠ Not configured |
| X-Frame-Options | ✔ DENY |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=15552000; includeSubDomains
CSP ⚠ Not configured
X-Frame-Options ✔ DENY
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
Detected Technologies
| Technology | Google Analytics Google Tag Manager Next.js Stripe |
Technology Google Analytics Google Tag Manager Next.js Stripe
HTTP Headers
| Content-type
| text/html; charset=utf-8 |
| Date
| Wed, 19 Aug 2026 22:13:47 GMT |
| Etag
| "11xnx44jmpazzv" |
| Content-encoding
| gzip |
| Content-security-policy-report-only
| default-src 'self' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https:// connect.facebook.net/ https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://api.sardine.ai https://static.zdassets.com/ https://ekr.zdassets https://ekr.zendesk.com https://*.zopim.com wss://demonifty.zendesk.com wss://*.zopim.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://edge.fullstory.com/s/ https://static.ads-twitter.com/uwt.js https://sc-static.net/ https://googleads.g.doubleclick.net/ https://tr.snapchat.com; style-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://fonts.googleapis.com *.live-video.net; script-src-elem 'self' 'unsafe-inline' https://js.stripe.com https://api.dev.sardine.ai https://edge.fullstory.com https://www.googletagmanager.com/gtag/js https://connect.facebook.net https://static.ads-twitter.com/uwt.js https://sc-static.net/scevent.min.js https://www.google.com/recaptcha/ https://static.zdassets.com/ https://www.gstatic.com/recaptcha/ https://tr.snapchat.com/ https://www.google-analytics.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://api.sardine.ai https://unpkg.com/@google/model-viewer/dist/model-viewer.min.js https://www.youtube.com https://www.googleoptimize.com https://www.clarity.ms *.live-video.net; img-src https: blob: data:; connect-src https://browser-intake-datadoghq.com https://www.niftygateway.com https://niftygateway.com https://analytics.google.com https://*.clarity.ms https://niftygateway.zendesk.com https://api.niftygateway.com https://odysseymarket.niftygateway.com https://api.sandbox.niftygateway.com https://stats.g.doubleclick.net https://www.facebook.com/tr/ https://www.google-analytics.com https://www.clarity.ms wss://widget-mediator.zopim.com https://nifty-qa100.service.aws-qa.sd.gem.link https://demonifty.zendesk.com https://ekr.zdassets.com https://encrypted-tbn0.gstatic.com/images https://lh3.googleusercontent.com https://tr.snapchat.com https://eth-goerli.alchemyapi.io https://search-api-staging.s-niftygateway-001-use1.svc.gem.link https://search-api.niftygateway.com https://search-api-dev.d-niftygateway-001-use1.svc.gem.link https://ipfs.io https://rs.fullstory.com https://session-replay.browser-intake-datadoghq.com https://eth-mainnet.alchemyapi.io https://api.cloudinary.com/v1_1/nifty_gateway/auto/upload https://openseauserdata.com https://rum.browser-intake-datadoghq.com https://api.x.immutable.com https://i.seadn.io https://cdn.optimizely.com https://img.seadn.io https://storage.opensea.io https://api.opensea.io https://sdk.iad-03.braze.com *.live-video.net ; font-src https://fonts.gstatic.com https://use.typekit.net/ 'self'; object-src 'self'; media-src https://media.niftygateway.com https://static.zdassets.com https://openseauserdata.com https://storage.opensea.io https://res.cloudinary.com blob:; frame-src https://js.stripe.com https://www.google.com https://api.sardine.ai https://api.dev.sardine.ai https://tr.snapchat.com/ https://www.youtube.com https://webusprd01.ihsmtaxsolutions.com/Nifty/ https://td.doubleclick.net/; frame-ancestors 'self'; worker-src blob:; |
| Referrer-policy
| strict-origin-when-cross-origin |
| Strict-transport-security
| max-age=15552000; includeSubDomains |
| X-content-type-options
| nosniff |
| X-frame-options
| DENY |
| X-time
| 1787177627651 |
| X-nextjs-cache
| HIT |
| X-powered-by
| Next.js |
| Cache-control
| no-cache,no-store,must-revalidate |
| Vary
| Accept-Encoding |
| X-cache
| Miss from cloudfront |
| Via
| 1.1 3d1425c38b292c3ba56b50bde6a083e2.cloudfront.net (CloudFront) |
| X-amz-cf-pop
| CDG54-P2 |
| Alt-svc
| h3=":443"; ma=86400 |
| X-amz-cf-id
| AOtpvPwngnIm1U87-qsLH0P6Whb3ks-HfxpmzexoSmSVM44wvU0pxw== |
Meta Tags
| Viewport | width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no |
Content-type text/html; charset=utf-8
Date Wed, 19 Aug 2026 22:13:47 GMT
Etag "11xnx44jmpazzv"
Content-encoding gzip
Content-security-policy-report-only default-src 'self' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https:// connect.facebook.net/ https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://api.sardine.ai https://static.zdassets.com/ https://ekr.zdassets https://ekr.zendesk.com https://*.zopim.com wss://demonifty.zendesk.com wss://*.zopim.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://edge.fullstory.com/s/ https://static.ads-twitter.com/uwt.js https://sc-static.net/ https://googleads.g.doubleclick.net/ https://tr.snapchat.com; style-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://fonts.googleapis.com *.live-video.net; script-src-elem 'self' 'unsafe-inline' https://js.stripe.com https://api.dev.sardine.ai https://edge.fullstory.com https://www.googletagmanager.com/gtag/js https://connect.facebook.net https://static.ads-twitter.com/uwt.js https://sc-static.net/scevent.min.js https://www.google.com/recaptcha/ https://static.zdassets.com/ https://www.gstatic.com/recaptcha/ https://tr.snapchat.com/ https://www.google-analytics.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://api.sardine.ai https://unpkg.com/@google/model-viewer/dist/model-viewer.min.js https://www.youtube.com https://www.googleoptimize.com https://www.clarity.ms *.live-video.net; img-src https: blob: data:; connect-src https://browser-intake-datadoghq.com https://www.niftygateway.com https://niftygateway.com https://analytics.google.com https://*.clarity.ms https://niftygateway.zendesk.com https://api.niftygateway.com https://odysseymarket.niftygateway.com https://api.sandbox.niftygateway.com https://stats.g.doubleclick.net https://www.facebook.com/tr/ https://www.google-analytics.com https://www.clarity.ms wss://widget-mediator.zopim.com https://nifty-qa100.service.aws-qa.sd.gem.link https://demonifty.zendesk.com https://ekr.zdassets.com https://encrypted-tbn0.gstatic.com/images https://lh3.googleusercontent.com https://tr.snapchat.com https://eth-goerli.alchemyapi.io https://search-api-staging.s-niftygateway-001-use1.svc.gem.link https://search-api.niftygateway.com https://search-api-dev.d-niftygateway-001-use1.svc.gem.link https://ipfs.io https://rs.fullstory.com https://session-replay.browser-intake-datadoghq.com https://eth-mainnet.alchemyapi.io https://api.cloudinary.com/v1_1/nifty_gateway/auto/upload https://openseauserdata.com https://rum.browser-intake-datadoghq.com https://api.x.immutable.com https://i.seadn.io https://cdn.optimizely.com https://img.seadn.io https://storage.opensea.io https://api.opensea.io https://sdk.iad-03.braze.com *.live-video.net ; font-src https://fonts.gstatic.com https://use.typekit.net/ 'self'; object-src 'self'; media-src https://media.niftygateway.com https://static.zdassets.com https://openseauserdata.com https://storage.opensea.io https://res.cloudinary.com blob:; frame-src https://js.stripe.com https://www.google.com https://api.sardine.ai https://api.dev.sardine.ai https://tr.snapchat.com/ https://www.youtube.com https://webusprd01.ihsmtaxsolutions.com/Nifty/ https://td.doubleclick.net/; frame-ancestors 'self'; worker-src blob:;
Referrer-policy strict-origin-when-cross-origin
Strict-transport-security max-age=15552000; includeSubDomains
X-content-type-options nosniff
X-frame-options DENY
X-time 1787177627651
X-nextjs-cache HIT
X-powered-by Next.js
Cache-control no-cache,no-store,must-revalidate
Vary Accept-Encoding
X-cache Miss from cloudfront
Via 1.1 3d1425c38b292c3ba56b50bde6a083e2.cloudfront.net (CloudFront)
X-amz-cf-pop CDG54-P2
Alt-svc h3=":443"; ma=86400
X-amz-cf-id AOtpvPwngnIm1U87-qsLH0P6Whb3ks-HfxpmzexoSmSVM44wvU0pxw==
