The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers.
ℹ 🔵Missing Content Security Policy
CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵Missing X-Frame-Options
The site can be embedded in iframes by third parties (clickjacking risk).
HTTP Status Code200 HTTP VersionHTTP/1.1 HTTPS✔ Available IP Address198.49.23.144 Server SoftwareSquarespace Compressiongzip 🔒 🟡Mixed Content (1 HTTP resources)The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers. ℹ 🔵Missing Content Security PolicyCSP is not configured. It helps prevent XSS attacks and content injection. ℹ 🔵Missing X-Frame-OptionsThe site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
#
URL
HTTP Status Code
Status
1
https://cthermal.com:443
301
HTTP/2 301
2
https://www.cthermal.com/
200
HTTP/2 200
#1 URLhttps://cthermal.com:443 HTTP Status Code301 StatusHTTP/2 301 #2 URLhttps://www.cthermal.com/ HTTP Status Code200 StatusHTTP/2 200
Performance
DNS Lookup
159.8 ms
TCP Connect
174.5 ms
TLS Handshake
22.8 ms
Time To First Byte (TTFB)
221.7 ms
Content Download
23.6 ms
Total Response Time
245.3 ms
DNS Lookup159.8 ms TCP Connect174.5 ms TLS Handshake22.8 ms Time To First Byte (TTFB)221.7 ms Content Download23.6 ms Total Response Time245.3 ms
Security
HTTPS
✔ Enabled
HSTS
✔ max-age=15552000
CSP
⚠ Not configured
X-Frame-Options
⚠ Not configured
X-Content-Type-Options
✔ nosniff
HTTP/2
⚠ HTTP/1.1
HTTPS✔ Enabled HSTS✔ max-age=15552000 CSP⚠ Not configured X-Frame-Options⚠ Not configured X-Content-Type-Options✔ nosniff HTTP/2⚠ HTTP/1.1