Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 150.171.110.117 |
| Compression | gzip |
|
🔒 🟡 Mixed Content (3 HTTP resources) | The page is served over HTTPS but loads 3 resource(s) over HTTP. This may be blocked in modern browsers. |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 150.171.110.117
Compression gzip
🔒 🟡 Mixed Content (3 HTTP resources) The page is served over HTTPS but loads 3 resource(s) over HTTP. This may be blocked in modern browsers.
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
Performance
| DNS Lookup | 10.5 ms |
| TCP Connect | 11.7 ms |
| TLS Handshake | 6.5 ms |
| Time To First Byte (TTFB) | 132.9 ms |
| Content Download | 6.4 ms |
| Total Response Time | 139.3 ms |
DNS Lookup 10.5 ms
TCP Connect 11.7 ms
TLS Handshake 6.5 ms
Time To First Byte (TTFB) 132.9 ms
Content Download 6.4 ms
Total Response Time 139.3 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000; includeSubDomains; preload |
| CSP | ⚠ Not configured |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000; includeSubDomains; preload
CSP ⚠ Not configured
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Boutique Hotels & Resorts | Small Luxury Hotels of the World | SLH |
| Meta Description | Book over 700 hotels in over 100 countries with Small Luxury Hotels of the World. Find your next luxury escape, nearby or far away. Join our club for exclusive rates. |
| Canonical | https://slh.com/ |
| Robots Meta | index, follow |
Title Boutique Hotels & Resorts | Small Luxury Hotels of the World | SLH
Meta Description Book over 700 hotels in over 100 countries with Small Luxury Hotels of the World. Find your next luxury escape, nearby or far away. Join our club for exclusive rates.
Canonical https://slh.com/
Robots Meta index, follow
Detected Technologies
| Technology | jQuery Google Analytics Google Tag Manager Hotjar |
Technology jQuery Google Analytics Google Tag Manager Hotjar
HTTP Headers
| Date
| Thu, 20 Aug 2026 15:45:14 GMT |
| Content-type
| text/html; charset=utf-8 |
| Content-length
| 20023 |
| Cache-control
| private |
| Content-encoding
| gzip |
| Set-cookie
| __RequestVerificationToken=efpnN-tm_V4VihAWoz46_AI6UkcmtrsR7FyIeK9My1sof47HTz4ire9S4Kd5RJRfrlokhKORazJt9jiYTr-P-r77uJYpFWuqowJnSmegacQ1; path=/; secure; HttpOnly; SameSite=None |
| Vary
| Accept-Encoding |
| Strict-transport-security
| max-age=31536000; includeSubDomains; preload |
| Content-security-policy-report-only
| default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.curator.io *.elfsight.com *.hotjar.com *.facebook.net *.cloudfront.net *.micpn.com *.searchstax.com *.wisepops.com wisepops.com *.wisepops.net wisepops.net *.sentry-cdn.com *.thehotelsnetwork.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.fonts.net *.myfonts.net *.doubleclick.net *.curator.io; img-src 'self' data: blob: *.google.co.uk *.facebook.com *.doubleclick.net *.google-analytics.com *.micpn.com *.googleapis.com *.gstatic.com *.cloudfront.net *.curator.io *.tripadvisor.com; connect-src 'self' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.micpn.com *.facebook.com *.mapbox.com *.curator.io *.wisepops.net *.wisepops.com wisepops.net wisepops.com *.thehotelsnetwork.com; font-src 'self' data: *.fonts.net *.myfonts.net *.gstatic.com; worker-src 'self' blob:; child-src 'self' blob: *.google.com *.googleapis.com *.googletagmanager.com *.doubleclick.net; frame-src 'self' *.google.com *.doubleclick.net *.facebook.com; media-src 'self'; object-src 'none'; base-uri 'self'; report-uri https://3chillies.report-uri.com/r/d/csp/reportOnly; |
| X-frame-options
| SAMEORIGIN |
| Request-context
| appId=cid-v1:0ae343ca-623c-4499-b925-d423e52cbb79 |
| Accept-ch
| Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness |
| X-content-type-options
| nosniff |
| Referrer-policy
| strict-origin-when-cross-origin |
| X-azure-ref
| 20260820T154514Z-169b99996879skn7hC1PARab5000000003ng000000002ydr |
| X-cache
| CONFIG_NOCACHE |
| Accept-ranges
| bytes |
Meta Tags
| X-UA-Compatible | IE=edge |
| Description | Book over 700 hotels in over 100 countries with Small Luxury Hotels of the World. Find your next luxury escape, nearby or far away. Join our club for exclusive rates. |
| Robots | index, follow |
| Viewport | width=device-width, initial-scale=1 |
| Msapplication-TileColor | #ffffff |
| Msapplication-TileImage |  |
| Msapplication-config | /frontend/static/media/favicon/browserconfig.xml |
| Theme-color | #ffffff |
Date Thu, 20 Aug 2026 15:45:14 GMT
Content-type text/html; charset=utf-8
Content-length 20023
Cache-control private
Content-encoding gzip
Set-cookie __RequestVerificationToken=efpnN-tm_V4VihAWoz46_AI6UkcmtrsR7FyIeK9My1sof47HTz4ire9S4Kd5RJRfrlokhKORazJt9jiYTr-P-r77uJYpFWuqowJnSmegacQ1; path=/; secure; HttpOnly; SameSite=None
Vary Accept-Encoding
Strict-transport-security max-age=31536000; includeSubDomains; preload
Content-security-policy-report-only default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.curator.io *.elfsight.com *.hotjar.com *.facebook.net *.cloudfront.net *.micpn.com *.searchstax.com *.wisepops.com wisepops.com *.wisepops.net wisepops.net *.sentry-cdn.com *.thehotelsnetwork.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.fonts.net *.myfonts.net *.doubleclick.net *.curator.io; img-src 'self' data: blob: *.google.co.uk *.facebook.com *.doubleclick.net *.google-analytics.com *.micpn.com *.googleapis.com *.gstatic.com *.cloudfront.net *.curator.io *.tripadvisor.com; connect-src 'self' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.micpn.com *.facebook.com *.mapbox.com *.curator.io *.wisepops.net *.wisepops.com wisepops.net wisepops.com *.thehotelsnetwork.com; font-src 'self' data: *.fonts.net *.myfonts.net *.gstatic.com; worker-src 'self' blob:; child-src 'self' blob: *.google.com *.googleapis.com *.googletagmanager.com *.doubleclick.net; frame-src 'self' *.google.com *.doubleclick.net *.facebook.com; media-src 'self'; object-src 'none'; base-uri 'self'; report-uri https://3chillies.report-uri.com/r/d/csp/reportOnly;
X-frame-options SAMEORIGIN
Request-context appId=cid-v1:0ae343ca-623c-4499-b925-d423e52cbb79
Accept-ch Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness
X-content-type-options nosniff
Referrer-policy strict-origin-when-cross-origin
X-azure-ref 20260820T154514Z-169b99996879skn7hC1PARab5000000003ng000000002ydr
X-cache CONFIG_NOCACHE
Accept-ranges bytes
