Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 150.171.109.100 |
| Compression | gzip |
|
🔒 🟡 Mixed Content (3 HTTP resources) | The page is served over HTTPS but loads 3 resource(s) over HTTP. This may be blocked in modern browsers. |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 150.171.109.100
Compression gzip
🔒 🟡 Mixed Content (3 HTTP resources) The page is served over HTTPS but loads 3 resource(s) over HTTP. This may be blocked in modern browsers.
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
Performance
| DNS Lookup | 6.3 ms |
| TCP Connect | 14.6 ms |
| TLS Handshake | 23.9 ms |
| Time To First Byte (TTFB) | 192.8 ms |
| Content Download | 12.9 ms |
| Total Response Time | 205.7 ms |
DNS Lookup 6.3 ms
TCP Connect 14.6 ms
TLS Handshake 23.9 ms
Time To First Byte (TTFB) 192.8 ms
Content Download 12.9 ms
Total Response Time 205.7 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000; includeSubDomains; preload |
| CSP | ⚠ Not configured |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000; includeSubDomains; preload
CSP ⚠ Not configured
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Boutique Hotels & Resorts | Small Luxury Hotels of the World | SLH |
| Meta Description | Book over 700 hotels in over 100 countries with Small Luxury Hotels of the World. Find your next luxury escape, nearby or far away. Join our club for exclusive rates. |
| Canonical | https://slh.com/ |
| Robots Meta | index, follow |
Title Boutique Hotels & Resorts | Small Luxury Hotels of the World | SLH
Meta Description Book over 700 hotels in over 100 countries with Small Luxury Hotels of the World. Find your next luxury escape, nearby or far away. Join our club for exclusive rates.
Canonical https://slh.com/
Robots Meta index, follow
Detected Technologies
| Technology | jQuery Google Analytics Google Tag Manager Hotjar |
Technology jQuery Google Analytics Google Tag Manager Hotjar
HTTP Headers
| Date
| Wed, 19 Aug 2026 22:03:53 GMT |
| Content-type
| text/html; charset=utf-8 |
| Content-length
| 20020 |
| Cache-control
| private |
| Content-encoding
| gzip |
| Set-cookie
| __RequestVerificationToken=UCeg2EzNjOISoXNfQMW2ZmiGKzm0J2d1zP_oZ58laAHzB7bcDQbhAyGYh8W2kNl7sE5np7Fm9DguCrrsAheSEIa5G1yApp99ETbLau0ebHM1; path=/; secure; HttpOnly; SameSite=None |
| Vary
| Accept-Encoding |
| Strict-transport-security
| max-age=31536000; includeSubDomains; preload |
| Content-security-policy-report-only
| default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.curator.io *.elfsight.com *.hotjar.com *.facebook.net *.cloudfront.net *.micpn.com *.searchstax.com *.wisepops.com wisepops.com *.wisepops.net wisepops.net *.sentry-cdn.com *.thehotelsnetwork.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.fonts.net *.myfonts.net *.doubleclick.net *.curator.io; img-src 'self' data: blob: *.google.co.uk *.facebook.com *.doubleclick.net *.google-analytics.com *.micpn.com *.googleapis.com *.gstatic.com *.cloudfront.net *.curator.io *.tripadvisor.com; connect-src 'self' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.micpn.com *.facebook.com *.mapbox.com *.curator.io *.wisepops.net *.wisepops.com wisepops.net wisepops.com *.thehotelsnetwork.com; font-src 'self' data: *.fonts.net *.myfonts.net *.gstatic.com; worker-src 'self' blob:; child-src 'self' blob: *.google.com *.googleapis.com *.googletagmanager.com *.doubleclick.net; frame-src 'self' *.google.com *.doubleclick.net *.facebook.com; media-src 'self'; object-src 'none'; base-uri 'self'; report-uri https://3chillies.report-uri.com/r/d/csp/reportOnly; |
| X-frame-options
| SAMEORIGIN |
| Request-context
| appId=cid-v1:0ae343ca-623c-4499-b925-d423e52cbb79 |
| Accept-ch
| Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness |
| X-content-type-options
| nosniff |
| Referrer-policy
| strict-origin-when-cross-origin |
| X-azure-ref
| 20260819T220353Z-1659b98fb99hx8l6hC1FRAhpxg00000007tg000000002u15 |
| X-cache
| CONFIG_NOCACHE |
| Accept-ranges
| bytes |
Meta Tags
| X-UA-Compatible | IE=edge |
| Description | Book over 700 hotels in over 100 countries with Small Luxury Hotels of the World. Find your next luxury escape, nearby or far away. Join our club for exclusive rates. |
| Robots | index, follow |
| Viewport | width=device-width, initial-scale=1 |
| Msapplication-TileColor | #ffffff |
| Msapplication-TileImage |  |
| Msapplication-config | /frontend/static/media/favicon/browserconfig.xml |
| Theme-color | #ffffff |
Date Wed, 19 Aug 2026 22:03:53 GMT
Content-type text/html; charset=utf-8
Content-length 20020
Cache-control private
Content-encoding gzip
Set-cookie __RequestVerificationToken=UCeg2EzNjOISoXNfQMW2ZmiGKzm0J2d1zP_oZ58laAHzB7bcDQbhAyGYh8W2kNl7sE5np7Fm9DguCrrsAheSEIa5G1yApp99ETbLau0ebHM1; path=/; secure; HttpOnly; SameSite=None
Vary Accept-Encoding
Strict-transport-security max-age=31536000; includeSubDomains; preload
Content-security-policy-report-only default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.curator.io *.elfsight.com *.hotjar.com *.facebook.net *.cloudfront.net *.micpn.com *.searchstax.com *.wisepops.com wisepops.com *.wisepops.net wisepops.net *.sentry-cdn.com *.thehotelsnetwork.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.fonts.net *.myfonts.net *.doubleclick.net *.curator.io; img-src 'self' data: blob: *.google.co.uk *.facebook.com *.doubleclick.net *.google-analytics.com *.micpn.com *.googleapis.com *.gstatic.com *.cloudfront.net *.curator.io *.tripadvisor.com; connect-src 'self' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.micpn.com *.facebook.com *.mapbox.com *.curator.io *.wisepops.net *.wisepops.com wisepops.net wisepops.com *.thehotelsnetwork.com; font-src 'self' data: *.fonts.net *.myfonts.net *.gstatic.com; worker-src 'self' blob:; child-src 'self' blob: *.google.com *.googleapis.com *.googletagmanager.com *.doubleclick.net; frame-src 'self' *.google.com *.doubleclick.net *.facebook.com; media-src 'self'; object-src 'none'; base-uri 'self'; report-uri https://3chillies.report-uri.com/r/d/csp/reportOnly;
X-frame-options SAMEORIGIN
Request-context appId=cid-v1:0ae343ca-623c-4499-b925-d423e52cbb79
Accept-ch Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness
X-content-type-options nosniff
Referrer-policy strict-origin-when-cross-origin
X-azure-ref 20260819T220353Z-1659b98fb99hx8l6hC1FRAhpxg00000007tg000000002u15
X-cache CONFIG_NOCACHE
Accept-ranges bytes
