Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 138.197.62.195 |
| Compression | gzip |
|
ℹ 🔵 Missing HSTS | HTTP Strict Transport Security is not configured. Recommended for HTTPS sites. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 138.197.62.195
Compression gzip
ℹ 🔵 Missing HSTS HTTP Strict Transport Security is not configured. Recommended for HTTPS sites.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Performance
| DNS Lookup | 30.7 ms |
| TCP Connect | 122.7 ms |
| TLS Handshake | 97.6 ms |
| Time To First Byte (TTFB) | 411.5 ms |
| Content Download | 92 ms |
| Total Response Time | 503.5 ms |
DNS Lookup 30.7 ms
TCP Connect 122.7 ms
TLS Handshake 97.6 ms
Time To First Byte (TTFB) 411.5 ms
Content Download 92 ms
Total Response Time 503.5 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✘ Not configured |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✘ Not configured
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
Detected Technologies
| Technology | Google Analytics Google Tag Manager Node.js |
Technology Google Analytics Google Tag Manager Node.js
HTTP Headers
| Alt-svc
| h3=":443"; ma=2592000 |
| Cache-control
| max-age=0, private, must-revalidate |
| Content-encoding
| gzip |
| Content-security-policy
| frame-ancestors https://*.whitney.org http://localhost:* |
| Content-type
| text/html; charset=utf-8 |
| Etag
| W/"50aecf9aa2f308c8c9ef275c32fc443c" |
| Link
| ; rel=preload; as=style; nopush,; rel=modulepreload; as=script; nopush,; rel=modulepreload; as=script; nopush |
| Referrer-policy
| strict-origin-when-cross-origin |
| Set-cookie
| _whitney_session=hS2hv7rV4A8pHPym9OnwhBid6zUVN8%2FPhJKLjJtp4oYbcq99xW%2FWYJHOvoLx%2B0sn0NNi34siNNyq9Qq8XEYAFegLNle%2Btbu3Kgum7DmAVjdOd0xL0tG1nG8D%2Bid3Nz73I%2BFGOqfZy%2FLTZzGVO%2BDhJPZPGbUTANMGRcH%2BFXkaMK%2Bkl%2Bfenc92GuviFMWyc3i4uf5n%2FTGKsitP%2FNhMo2nF%2Bbnfl8TjZ4xtmWo%2ByAOkNVtY8cd8uUVqKItHhFrrkIvV%2B%2BbnZsxvtX%2B0K7h%2FIe5mFBkRYTvk2SFZ--tCKwKIaY9klXONHe--5hsKtoPAKfj%2FaMlse%2B9c2A%3D%3D; domain=whitney.org; path=/; secure; httponly; samesite=lax |
| Vary
| Accept-Encoding |
| Via
| 1.1 Caddy |
| X-content-type-options
| nosniff |
| X-permitted-cross-domain-policies
| none |
| X-request-id
| b3d3b8cf-99e8-462c-9787-8c49a5c2ddb4 |
| X-runtime
| 0.095933 |
| X-xss-protection
| 0 |
| Date
| Thu, 27 Aug 2026 19:29:11 GMT |
Meta Tags
| Viewport | width=device-width, initial-scale=1, viewport-fit=cover |
| Google-site-verification | 7H-upWFqE2QIpO83eIsNxpEUchG7lrWFMOZlOzoM3GI |
| Theme-color | #FFFFFF |
| Color-scheme | dark light |
| Turbo-cache-control | no-cache |
| Turbo-prefetch | false |
| Description | The Whitney Museum of American Art. Explore works, exhibitions, and events online. Located in New York City. |
| Csrf-param | authenticity_token |
| Csrf-token | ze3jM2720uS_Y45aq0t7tbbSWGfgw4MQqHhepwVKKK5aiU3Oc9_TwxHoxcb2k1xPnZZd5f9k6OzCx7bAQvCz3g |
| Action-cable-url | /cable |
Alt-svc h3=":443"; ma=2592000
Cache-control max-age=0, private, must-revalidate
Content-encoding gzip
Content-security-policy frame-ancestors https://*.whitney.org http://localhost:*
Content-type text/html; charset=utf-8
Etag W/"50aecf9aa2f308c8c9ef275c32fc443c"
Link ; rel=preload; as=style; nopush,; rel=modulepreload; as=script; nopush,; rel=modulepreload; as=script; nopush
Referrer-policy strict-origin-when-cross-origin
Set-cookie _whitney_session=hS2hv7rV4A8pHPym9OnwhBid6zUVN8%2FPhJKLjJtp4oYbcq99xW%2FWYJHOvoLx%2B0sn0NNi34siNNyq9Qq8XEYAFegLNle%2Btbu3Kgum7DmAVjdOd0xL0tG1nG8D%2Bid3Nz73I%2BFGOqfZy%2FLTZzGVO%2BDhJPZPGbUTANMGRcH%2BFXkaMK%2Bkl%2Bfenc92GuviFMWyc3i4uf5n%2FTGKsitP%2FNhMo2nF%2Bbnfl8TjZ4xtmWo%2ByAOkNVtY8cd8uUVqKItHhFrrkIvV%2B%2BbnZsxvtX%2B0K7h%2FIe5mFBkRYTvk2SFZ--tCKwKIaY9klXONHe--5hsKtoPAKfj%2FaMlse%2B9c2A%3D%3D; domain=whitney.org; path=/; secure; httponly; samesite=lax
Vary Accept-Encoding
Via 1.1 Caddy
X-content-type-options nosniff
X-permitted-cross-domain-policies none
X-request-id b3d3b8cf-99e8-462c-9787-8c49a5c2ddb4
X-runtime 0.095933
X-xss-protection 0
Date Thu, 27 Aug 2026 19:29:11 GMT
