CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵Missing X-Frame-Options
The site can be embedded in iframes by third parties (clickjacking risk).
HTTP Status Code200 HTTP VersionHTTP/1.1 HTTPS✔ Available IP Address18.162.183.187 Server Softwarenginx Compressiongzip ℹ 🔵Missing Content Security PolicyCSP is not configured. It helps prevent XSS attacks and content injection. ℹ 🔵Missing X-Frame-OptionsThe site can be embedded in iframes by third parties (clickjacking risk).
Performance
DNS Lookup
202.9 ms
TCP Connect
389.4 ms
TLS Handshake
188.7 ms
Time To First Byte (TTFB)
764.8 ms
Content Download
0.1 ms
Total Response Time
764.9 ms
DNS Lookup202.9 ms TCP Connect389.4 ms TLS Handshake188.7 ms Time To First Byte (TTFB)764.8 ms Content Download0.1 ms Total Response Time764.9 ms
Security
HTTPS
✔ Enabled
HSTS
✔ max-age=31536000
CSP
⚠ Not configured
X-Frame-Options
⚠ Not configured
X-Content-Type-Options
⚠ Not configured
HTTP/2
⚠ HTTP/1.1
HTTPS✔ Enabled HSTS✔ max-age=31536000 CSP⚠ Not configured X-Frame-Options⚠ Not configured X-Content-Type-Options⚠ Not configured HTTP/2⚠ HTTP/1.1
Detected Technologies
Technology
Nginx
TechnologyNginx
HTTP Headers
Date
Fri, 21 Aug 2026 11:04:17 GMT
Content-Type
text/html
Transfer-Encoding
chunked
Connection
keep-alive
Vary
Accept-Encoding
Cache-Control
no-store, no-cache, must-revalidate, max-age=0
Pragma
no-cache
Expires
Thu, 01 Jan 1970 00:00:00 GMT
X-Verify-Status
pending
X-Protection
Bot Verification System
Server
nginx
Strict-Transport-Security
max-age=31536000
Content-Encoding
gzip
DateFri, 21 Aug 2026 11:04:17 GMT Content-Typetext/html Transfer-Encodingchunked Connectionkeep-alive VaryAccept-Encoding Cache-Controlno-store, no-cache, must-revalidate, max-age=0 Pragmano-cache ExpiresThu, 01 Jan 1970 00:00:00 GMT X-Verify-Statuspending X-ProtectionBot Verification System Servernginx Strict-Transport-Securitymax-age=31536000 Content-Encodinggzip