Technical Information
| HTTP Status Code | 403 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 192.0.66.38 |
| Server Software | nginx |
| CDN | CDN (MISS) |
| Compression | gzip |
|
🚫 🟡 HTTP 403 Error | The server returned a 403 error. Check the access configuration. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 403
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 192.0.66.38
Server Software nginx
CDN CDN (MISS)
Compression gzip
🚫 🟡 HTTP 403 Error The server returned a 403 error. Check the access configuration.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Performance
| DNS Lookup | 321 ms |
| TCP Connect | 322.7 ms |
| TLS Handshake | 81.8 ms |
| Time To First Byte (TTFB) | 639.4 ms |
| Content Download | 0.1 ms |
| Total Response Time | 639.4 ms |
DNS Lookup 321 ms
TCP Connect 322.7 ms
TLS Handshake 81.8 ms
Time To First Byte (TTFB) 639.4 ms
Content Download 0.1 ms
Total Response Time 639.4 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=300;includeSubdomains |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ⚠ Not configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=300;includeSubdomains
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ⚠ Not configured
HTTP/2 ⚠ HTTP/1.1
Detected Technologies
| Technology | Google Analytics Nginx |
Technology Google Analytics Nginx
HTTP Headers
| Server | nginx |
| Date | Fri, 21 Aug 2026 10:07:20 GMT |
| Content-type | text/html; charset=utf-8 |
| Vary | Accept-Encoding |
| Content-security-policy | default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: *.visualwebsiteoptimizer.com; style-src 'unsafe-inline' https: *.visualwebsiteoptimizer.com app.vwo.com; img-src data: https: blob: *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; font-src data: https:; connect-src https: data: blob: *.visualwebsiteoptimizer.com app.vwo.com; media-src blob: data: https:; object-src https:; child-src https: data: blob: 'self' *.visualwebsiteoptimizer.com app.vwo.com; upgrade-insecure-requests; block-all-mixed-content; |
| Content-encoding | gzip |
| X-cache | MISS |
| X-rq | cdg1 0 20 9980 |
| Strict-transport-security | max-age=300;includeSubdomains |
Server nginx
Date Fri, 21 Aug 2026 10:07:20 GMT
Content-type text/html; charset=utf-8
Vary Accept-Encoding
Content-security-policy default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: *.visualwebsiteoptimizer.com; style-src 'unsafe-inline' https: *.visualwebsiteoptimizer.com app.vwo.com; img-src data: https: blob: *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; font-src data: https:; connect-src https: data: blob: *.visualwebsiteoptimizer.com app.vwo.com; media-src blob: data: https:; object-src https:; child-src https: data: blob: 'self' *.visualwebsiteoptimizer.com app.vwo.com; upgrade-insecure-requests; block-all-mixed-content;
Content-encoding gzip
X-cache MISS
X-rq cdg1 0 20 9980
Strict-transport-security max-age=300;includeSubdomains
