CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵Missing X-Frame-Options
The site can be embedded in iframes by third parties (clickjacking risk).
ℹ 🔵No Compression
The server does not use Gzip or Brotli. Enable compression to reduce bandwidth usage.
HTTP Status Code200 HTTP VersionHTTP/1.1 HTTPS✔ Available IP Address45.60.66.253 ℹ 🔵Missing Content Security PolicyCSP is not configured. It helps prevent XSS attacks and content injection. ℹ 🔵Missing X-Frame-OptionsThe site can be embedded in iframes by third parties (clickjacking risk). ℹ 🔵No CompressionThe server does not use Gzip or Brotli. Enable compression to reduce bandwidth usage.
Redirect Chain
#
URL
HTTP Status Code
Status
1
https://omanair.com:443
301
HTTP/1.1 301 Moved Permanently
2
https://www.omanair.com/
200
HTTP/1.1 200 OK
#1 URLhttps://omanair.com:443 HTTP Status Code301 StatusHTTP/1.1 301 Moved Permanently #2 URLhttps://www.omanair.com/ HTTP Status Code200 StatusHTTP/1.1 200 OK
Performance
DNS Lookup
23 ms
TCP Connect
32.2 ms
TLS Handshake
11.8 ms
Time To First Byte (TTFB)
54.5 ms
Content Download
0 ms
Total Response Time
54.5 ms
DNS Lookup23 ms TCP Connect32.2 ms TLS Handshake11.8 ms Time To First Byte (TTFB)54.5 ms Content Download0 ms Total Response Time54.5 ms
Security
HTTPS
✔ Enabled
HSTS
✔ max-age=31536000; includeSubDomains; preload
CSP
⚠ Not configured
X-Frame-Options
⚠ Not configured
X-Content-Type-Options
⚠ Not configured
HTTP/2
⚠ HTTP/1.1
HTTPS✔ Enabled HSTS✔ max-age=31536000; includeSubDomains; preload CSP⚠ Not configured X-Frame-Options⚠ Not configured X-Content-Type-Options⚠ Not configured HTTP/2⚠ HTTP/1.1