Technical Information
| HTTP Status Code | 403 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 192.0.66.166 |
| Server Software | nginx |
| CDN | CDN (MISS) |
| Compression | gzip |
|
🚫 🟡 HTTP 403 Error | The server returned a 403 error. Check the access configuration. |
|
ℹ 🔵 Missing HSTS | HTTP Strict Transport Security is not configured. Recommended for HTTPS sites. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 403
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 192.0.66.166
Server Software nginx
CDN CDN (MISS)
Compression gzip
🚫 🟡 HTTP 403 Error The server returned a 403 error. Check the access configuration.
ℹ 🔵 Missing HSTS HTTP Strict Transport Security is not configured. Recommended for HTTPS sites.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Performance
| DNS Lookup | 39 ms |
| TCP Connect | 40.5 ms |
| TLS Handshake | 8.7 ms |
| Time To First Byte (TTFB) | 252.3 ms |
| Content Download | 0.1 ms |
| Total Response Time | 252.4 ms |
DNS Lookup 39 ms
TCP Connect 40.5 ms
TLS Handshake 8.7 ms
Time To First Byte (TTFB) 252.3 ms
Content Download 0.1 ms
Total Response Time 252.4 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✘ Not configured |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ⚠ Not configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✘ Not configured
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ⚠ Not configured
HTTP/2 ⚠ HTTP/1.1
Detected Technologies
| Technology | Google Analytics Nginx |
Technology Google Analytics Nginx
HTTP Headers
| Server | nginx |
| Date | Thu, 20 Aug 2026 10:54:09 GMT |
| Content-type | text/html; charset=utf-8 |
| Vary | Accept-Encoding |
| Content-security-policy | default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: *.visualwebsiteoptimizer.com; style-src 'unsafe-inline' https: *.visualwebsiteoptimizer.com app.vwo.com; img-src data: https: blob: *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; font-src data: https:; connect-src https: data: blob: *.visualwebsiteoptimizer.com app.vwo.com; media-src blob: data: https:; object-src https:; child-src https: data: blob: 'self' *.visualwebsiteoptimizer.com app.vwo.com; upgrade-insecure-requests; block-all-mixed-content; |
| Content-encoding | gzip |
| X-rq | cdg2 0 20 9980 |
| X-cache | MISS |
Server nginx
Date Thu, 20 Aug 2026 10:54:09 GMT
Content-type text/html; charset=utf-8
Vary Accept-Encoding
Content-security-policy default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: *.visualwebsiteoptimizer.com; style-src 'unsafe-inline' https: *.visualwebsiteoptimizer.com app.vwo.com; img-src data: https: blob: *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; font-src data: https:; connect-src https: data: blob: *.visualwebsiteoptimizer.com app.vwo.com; media-src blob: data: https:; object-src https:; child-src https: data: blob: 'self' *.visualwebsiteoptimizer.com app.vwo.com; upgrade-insecure-requests; block-all-mixed-content;
Content-encoding gzip
X-rq cdg2 0 20 9980
X-cache MISS
