CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵Missing X-Frame-Options
The site can be embedded in iframes by third parties (clickjacking risk).
ℹ 🔵No Compression
The server does not use Gzip or Brotli. Enable compression to reduce bandwidth usage.
HTTP Status Code200 HTTP VersionHTTP/1.1 HTTPS✔ Available IP Address37.97.131.223 Server Softwarenginx ℹ 🔵Missing Content Security PolicyCSP is not configured. It helps prevent XSS attacks and content injection. ℹ 🔵Missing X-Frame-OptionsThe site can be embedded in iframes by third parties (clickjacking risk). ℹ 🔵No CompressionThe server does not use Gzip or Brotli. Enable compression to reduce bandwidth usage.
Performance
DNS Lookup
5.6 ms
TCP Connect
83.2 ms
TLS Handshake
79.2 ms
Time To First Byte (TTFB)
240.5 ms
Content Download
79.7 ms
Total Response Time
320.2 ms
DNS Lookup5.6 ms TCP Connect83.2 ms TLS Handshake79.2 ms Time To First Byte (TTFB)240.5 ms Content Download79.7 ms Total Response Time320.2 ms
Security
HTTPS
✔ Enabled
HSTS
✔ max-age=15768000; includeSubDomains
CSP
⚠ Not configured
X-Frame-Options
⚠ Not configured
X-Content-Type-Options
⚠ Not configured
HTTP/2
⚠ HTTP/1.1
HTTPS✔ Enabled HSTS✔ max-age=15768000; includeSubDomains CSP⚠ Not configured X-Frame-Options⚠ Not configured X-Content-Type-Options⚠ Not configured HTTP/2⚠ HTTP/1.1