CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵Missing X-Frame-Options
The site can be embedded in iframes by third parties (clickjacking risk).
ℹ 🔵No Compression
The server does not use Gzip or Brotli. Enable compression to reduce bandwidth usage.
HTTP Status Code200 HTTP VersionHTTP/1.1 HTTPS✔ Available IP Address45.60.62.253 ℹ 🔵Missing Content Security PolicyCSP is not configured. It helps prevent XSS attacks and content injection. ℹ 🔵Missing X-Frame-OptionsThe site can be embedded in iframes by third parties (clickjacking risk). ℹ 🔵No CompressionThe server does not use Gzip or Brotli. Enable compression to reduce bandwidth usage.
Redirect Chain
#
URL
HTTP Status Code
Status
1
https://omanair.com:443
301
HTTP/1.1 301 Moved Permanently
2
https://www.omanair.com/
200
HTTP/1.1 200 OK
#1 URLhttps://omanair.com:443 HTTP Status Code301 StatusHTTP/1.1 301 Moved Permanently #2 URLhttps://www.omanair.com/ HTTP Status Code200 StatusHTTP/1.1 200 OK
Performance
DNS Lookup
16.7 ms
TCP Connect
25.7 ms
TLS Handshake
11.3 ms
Time To First Byte (TTFB)
48.6 ms
Content Download
0 ms
Total Response Time
48.6 ms
DNS Lookup16.7 ms TCP Connect25.7 ms TLS Handshake11.3 ms Time To First Byte (TTFB)48.6 ms Content Download0 ms Total Response Time48.6 ms
Security
HTTPS
✔ Enabled
HSTS
✔ max-age=31536000; includeSubDomains; preload
CSP
⚠ Not configured
X-Frame-Options
⚠ Not configured
X-Content-Type-Options
⚠ Not configured
HTTP/2
⚠ HTTP/1.1
HTTPS✔ Enabled HSTS✔ max-age=31536000; includeSubDomains; preload CSP⚠ Not configured X-Frame-Options⚠ Not configured X-Content-Type-Options⚠ Not configured HTTP/2⚠ HTTP/1.1