Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 104.18.25.41 |
| Server Software | cloudflare |
| CDN | Cloudflare |
| Compression | gzip |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 104.18.25.41
Server Software cloudflare
CDN Cloudflare
Compression gzip
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://troyhunt.com:443 | 301 | HTTP/2 301 |
| 2 | https://www.troyhunt.com/ | 200 | HTTP/2 200 |
#1 URL https://troyhunt.com:443
HTTP Status Code 301
Status HTTP/2 301
#2 URL https://www.troyhunt.com/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 8.4 ms |
| TCP Connect | 10.4 ms |
| TLS Handshake | 9 ms |
| Time To First Byte (TTFB) | 51.1 ms |
| Content Download | 2 ms |
| Total Response Time | 53 ms |
DNS Lookup 8.4 ms
TCP Connect 10.4 ms
TLS Handshake 9 ms
Time To First Byte (TTFB) 51.1 ms
Content Download 2 ms
Total Response Time 53 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000; includeSubDomains; preload |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | no-referrer-when-downgrade |
| Permissions Policy | ✔ Configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000; includeSubDomains; preload
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
Referrer Policy no-referrer-when-downgrade
Permissions Policy ✔ Configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Troy Hunt: Troy Hunt |
| Meta Description | Hi, I'm Troy Hunt, I write this blog, run "Have I Been Pwned" and am a Microsoft Regional Director and MVP who travels the world speaking at events and training technology professionals |
| Canonical | https://www.troyhunt.com/ |
| Open Graph Title | Troy Hunt |
| Open Graph Description | Hi, I'm Troy Hunt, I write this blog, run "Have I Been Pwned" and am a Microsoft Regional Director and MVP who travels the world speaking at events and training technology professionals |
| Open Graph Image | https://storage.ghost.io/c/fb/33/fb3391dc-723d-4e74-b95a-... |
| Twitter Card | summary_large_image |
| Twitter Title | Troy Hunt |
| Twitter Description | Hi, I'm Troy Hunt, I write this blog, run "Have I Been Pwned" and am a Microsoft Regional Director and MVP who travels the world speaking at events and training technology professionals |
| Twitter Image | https://storage.ghost.io/c/fb/33/fb3391dc-723d-4e74-b95a-... |
Title Troy Hunt: Troy Hunt Meta Description Hi, I'm Troy Hunt, I write this blog, run "Have I Been Pwned" and am a Microsoft Regional Director and MVP who travels the world speaking at events and training technology professionals Canonical https://www.troyhunt.com/ Open Graph Title Troy Hunt Open Graph Description Hi, I'm Troy Hunt, I write this blog, run "Have I Been Pwned" and am a Microsoft Regional Director and MVP who travels the world speaking at events and training technology professionals Open Graph Image https://storage.ghost.io/c/fb/33/fb3391dc-723d-4e74-b95a-... Twitter Card summary_large_image Twitter Title Troy Hunt Twitter Description Hi, I'm Troy Hunt, I write this blog, run "Have I Been Pwned" and am a Microsoft Regional Director and MVP who travels the world speaking at events and training technology professionals Twitter Image https://storage.ghost.io/c/fb/33/fb3391dc-723d-4e74-b95a-... Detected Technologies
| Technology | Google Analytics Google Tag Manager Cloudflare Node.js Disqus |
Technology Google Analytics Google Tag Manager Cloudflare Node.js Disqus
HTTP Headers
| Date
| Fri, 28 Aug 2026 09:48:56 GMT |
| Content-type
| text/html; charset=utf-8 |
| Cf-ray
| a32267354cb5250f-CDG |
| Cf-cache-status
| BYPASS |
| Cache-control
| public, max-age=14400 |
| Expires
| Fri, 28 Aug 2026 13:48:56 GMT |
| Server
| cloudflare |
| Strict-transport-security
| max-age=31536000; includeSubDomains; preload |
| Vary
| Cookie, Accept-Encoding |
| Via
| 1.1 varnish, 1.1 varnish, 1.1 varnish |
| Content-security-policy
| default-src 'none'; connect-src 'self' api.passwordpurgatory.com bloghelpers.troyhunt.com links.services.disqus.com syndication.twitter.com troyhunt.ghost.io cdn.jsdelivr.net/ghost/ *.google-analytics.com *.privacymanager.io; font-src 'self' cdnjs.cloudflare.com fonts.gstatic.com; frame-src www.linkedin.com disqus.com c.disquscdn.com www.youtube.com player.vimeo.com twitter.com platform.twitter.com syndication.twitter.com omny.fm pastebin.com www.google.com; img-src 'self' c.disquscdn.com referrer.disqus.com syndication.twitter.com platform.twitter.com www.gravatar.com storage.ghost.io *.twimg.com data:; script-src 'self' passwordpurgatory.com c.disquscdn.com disqus.com troyhunt.disqus.com cdnjs.cloudflare.com platform.twitter.com platform.x.com cdn.syndication.twimg.com syndication.twitter.com gist.github.com/troyhunt/ cdn.jsdelivr.net/ghost/ www.googletagmanager.com *.privacymanager.io www.google.com www.gstatic.com static.cloudflareinsights.com ajax.cloudflare.com 'sha256-26FfYB0WAsKHsnA92jxqaHCDCNo7MV3NrLe1wgLwuI4=' 'sha256-4JqPqO/eQLWuWw1AE7dCvI9hPwiBcw0gy7uoLqS0ncg='; style-src 'self' 'unsafe-inline' c.disquscdn.com cdnjs.cloudflare.com platform.twitter.com ton.twimg.com assets-cdn.github.com github.githubassets.com fonts.googleapis.com; form-action *.twitter.com; media-src 'self'; frame-ancestors 'self' troyhunt.ghost.io; upgrade-insecure-requests; report-uri https://troyhunt.report-uri.com/r/d/csp/enforce |
| Referrer-policy
| no-referrer-when-downgrade |
| X-content-type-options
| nosniff |
| X-xss-protection
| 1; mode=block; report=https://troyhunt.report-uri.com/r/d/xss/enforce |
| Alt-svc
| h3=":443"; ma=86400 |
| Expect-ct
| max-age=0, report-uri=https://troyhunt.report-uri.com/r/d/ct/reportOnly |
| Ghost-fastly
| true;production |
| Nel
| {"report_to":"default","max_age":10886400} |
| Permissions-policy
| accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=() |
| Report-to
| {"group":"default","max_age":10886400,"endpoints":[{"url":"https://troyhunt.report-uri.com/a/d/g"}],"include_subdomains":true} |
| Status
| 200 OK |
| X-cache
| MISS, HIT, HIT |
| X-cache-hits
| 0, 4, 17 |
| X-request-id
| cb290d23-1339-443f-9f59-e33d1ebaff70 |
| X-served-by
| cache-ams-eham8680086-AMS, cache-ams-eham8680086-AMS, cache-ams-eham8680086-AMS, cache-rtm-ehrd2290048-RTM |
| X-timer
| S1787910537.539849,VS0,VE0 |
| Server-timing
| cfEdge;dur=4,cfOrigin;dur=0,cfWorker;dur=22 |
| Content-encoding
| gzip |
Meta Tags
| X-UA-Compatible | IE=edge |
| Description | Hi, I'm Troy Hunt, I write this blog, run "Have I Been Pwned" and am a Microsoft Regional Director and MVP who travels the world speaking at events and training technology professionals |
| HandheldFriendly | True |
| Viewport | width=device-width, initial-scale=1 |
| Referrer | no-referrer-when-downgrade |
| Article:publisher | https://www.facebook.com/troyahunt |
| Generator | Ghost 6.61 |
Date Fri, 28 Aug 2026 09:48:56 GMT
Content-type text/html; charset=utf-8
Cf-ray a32267354cb5250f-CDG
Cf-cache-status BYPASS
Cache-control public, max-age=14400
Expires Fri, 28 Aug 2026 13:48:56 GMT
Server cloudflare
Strict-transport-security max-age=31536000; includeSubDomains; preload
Vary Cookie, Accept-Encoding
Via 1.1 varnish, 1.1 varnish, 1.1 varnish
Content-security-policy default-src 'none'; connect-src 'self' api.passwordpurgatory.com bloghelpers.troyhunt.com links.services.disqus.com syndication.twitter.com troyhunt.ghost.io cdn.jsdelivr.net/ghost/ *.google-analytics.com *.privacymanager.io; font-src 'self' cdnjs.cloudflare.com fonts.gstatic.com; frame-src www.linkedin.com disqus.com c.disquscdn.com www.youtube.com player.vimeo.com twitter.com platform.twitter.com syndication.twitter.com omny.fm pastebin.com www.google.com; img-src 'self' c.disquscdn.com referrer.disqus.com syndication.twitter.com platform.twitter.com www.gravatar.com storage.ghost.io *.twimg.com data:; script-src 'self' passwordpurgatory.com c.disquscdn.com disqus.com troyhunt.disqus.com cdnjs.cloudflare.com platform.twitter.com platform.x.com cdn.syndication.twimg.com syndication.twitter.com gist.github.com/troyhunt/ cdn.jsdelivr.net/ghost/ www.googletagmanager.com *.privacymanager.io www.google.com www.gstatic.com static.cloudflareinsights.com ajax.cloudflare.com 'sha256-26FfYB0WAsKHsnA92jxqaHCDCNo7MV3NrLe1wgLwuI4=' 'sha256-4JqPqO/eQLWuWw1AE7dCvI9hPwiBcw0gy7uoLqS0ncg='; style-src 'self' 'unsafe-inline' c.disquscdn.com cdnjs.cloudflare.com platform.twitter.com ton.twimg.com assets-cdn.github.com github.githubassets.com fonts.googleapis.com; form-action *.twitter.com; media-src 'self'; frame-ancestors 'self' troyhunt.ghost.io; upgrade-insecure-requests; report-uri https://troyhunt.report-uri.com/r/d/csp/enforce
Referrer-policy no-referrer-when-downgrade
X-content-type-options nosniff
X-xss-protection 1; mode=block; report=https://troyhunt.report-uri.com/r/d/xss/enforce
Alt-svc h3=":443"; ma=86400
Expect-ct max-age=0, report-uri=https://troyhunt.report-uri.com/r/d/ct/reportOnly
Ghost-fastly true;production
Nel {"report_to":"default","max_age":10886400}
Permissions-policy accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()
Report-to {"group":"default","max_age":10886400,"endpoints":[{"url":"https://troyhunt.report-uri.com/a/d/g"}],"include_subdomains":true}
Status 200 OK
X-cache MISS, HIT, HIT
X-cache-hits 0, 4, 17
X-request-id cb290d23-1339-443f-9f59-e33d1ebaff70
X-served-by cache-ams-eham8680086-AMS, cache-ams-eham8680086-AMS, cache-ams-eham8680086-AMS, cache-rtm-ehrd2290048-RTM
X-timer S1787910537.539849,VS0,VE0
Server-timing cfEdge;dur=4,cfOrigin;dur=0,cfWorker;dur=22
Content-encoding gzip
