CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵Missing X-Frame-Options
The site can be embedded in iframes by third parties (clickjacking risk).
ℹ 🔵No Compression
The server does not use Gzip or Brotli. Enable compression to reduce bandwidth usage.
HTTP Status Code200 HTTP VersionHTTP/1.1 HTTPS✔ Available IP Address45.60.136.247 ℹ 🔵Missing Content Security PolicyCSP is not configured. It helps prevent XSS attacks and content injection. ℹ 🔵Missing X-Frame-OptionsThe site can be embedded in iframes by third parties (clickjacking risk). ℹ 🔵No CompressionThe server does not use Gzip or Brotli. Enable compression to reduce bandwidth usage.
Redirect Chain
#
URL
HTTP Status Code
Status
1
https://hbf.com:443
301
HTTP/2 301
2
https://www.hbf.com/
200
HTTP/2 200
#1 URLhttps://hbf.com:443 HTTP Status Code301 StatusHTTP/2 301 #2 URLhttps://www.hbf.com/ HTTP Status Code200 StatusHTTP/2 200
Performance
DNS Lookup
153.2 ms
TCP Connect
166.7 ms
TLS Handshake
17.6 ms
Time To First Byte (TTFB)
199 ms
Content Download
0 ms
Total Response Time
199.1 ms
DNS Lookup153.2 ms TCP Connect166.7 ms TLS Handshake17.6 ms Time To First Byte (TTFB)199 ms Content Download0 ms Total Response Time199.1 ms
Security
HTTPS
✔ Enabled
HSTS
✔ max-age=31536000
CSP
⚠ Not configured
X-Frame-Options
⚠ Not configured
X-Content-Type-Options
⚠ Not configured
HTTP/2
⚠ HTTP/1.1
HTTPS✔ Enabled HSTS✔ max-age=31536000 CSP⚠ Not configured X-Frame-Options⚠ Not configured X-Content-Type-Options⚠ Not configured HTTP/2⚠ HTTP/1.1