Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 69.20.113.171 |
| Server Software | nginx |
| Compression | gzip |
|
🔒 🟡 Mixed Content (1 HTTP resources) | The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers. |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 69.20.113.171
Server Software nginx
Compression gzip
🔒 🟡 Mixed Content (1 HTTP resources) The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers.
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://spymuseum.org:443 | 301 | HTTP/1.1 301 Moved Permanently |
| 2 | https://www.spymuseum.org/ | 200 | HTTP/1.1 200 OK |
#1 URL https://spymuseum.org:443
HTTP Status Code 301
Status HTTP/1.1 301 Moved Permanently
#2 URL https://www.spymuseum.org/
HTTP Status Code 200
Status HTTP/1.1 200 OK
Performance
| DNS Lookup | 162.7 ms |
| TCP Connect | 241.2 ms |
| TLS Handshake | 82.1 ms |
| Time To First Byte (TTFB) | 422.5 ms |
| Content Download | 0.4 ms |
| Total Response Time | 422.9 ms |
DNS Lookup 162.7 ms
TCP Connect 241.2 ms
TLS Handshake 82.1 ms
Time To First Byte (TTFB) 422.5 ms
Content Download 0.4 ms
Total Response Time 422.9 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=15768000; includeSubDomains |
| CSP | ⚠ Not configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=15768000; includeSubDomains
CSP ⚠ Not configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | International Spy Museum - Washington DC |
| Meta Description | Visit the International Spy Museum in Washington DC and step into the shoes of a spy. Experience DC's most immersive museum. Book your timed tickets online. |
| Open Graph Title | International Spy Museum - Washington DC |
| Open Graph Description | Visit the International Spy Museum in Washington DC and step into the shoes of a spy. Experience DC's most immersive museum. Book your timed tickets online. |
Title International Spy Museum - Washington DC
Meta Description Visit the International Spy Museum in Washington DC and step into the shoes of a spy. Experience DC's most immersive museum. Book your timed tickets online.
Open Graph Title International Spy Museum - Washington DC
Open Graph Description Visit the International Spy Museum in Washington DC and step into the shoes of a spy. Experience DC's most immersive museum. Book your timed tickets online.
Detected Technologies
| Technology | jQuery Google Analytics Google Tag Manager Nginx PHP |
Technology jQuery Google Analytics Google Tag Manager Nginx PHP
HTTP Headers
| Server
| nginx |
| Date
| Thu, 20 Aug 2026 16:17:35 GMT |
| Content-Type
| text/html;charset=UTF-8 |
| Content-Length
| 10649 |
| Connection
| keep-alive |
| X-Powered-By
| PleskLin |
| Expires
| Thu, 19 Nov 1981 08:52:00 GMT |
| Cache-Control
| no-store, no-cache, must-revalidate |
| Pragma
| no-cache |
| Vary
| Accept-Encoding |
| Content-Encoding
| gzip |
| X-UA-Compatible
| IE=edge |
| X-Content-Type-Options
| nosniff |
| X-XSS-Protection
| 1; mode=block |
| X-Permitted-Cross-Domain-Policies
| master-only |
| Strict-Transport-Security
| max-age=15768000; includeSubDomains |
Meta Tags
| Viewport | width=device-width, initial-scale=1 |
| Apple-mobile-web-app-capable | yes |
| Mobile-web-app-capable | yes |
| Msapplication-TileColor | #ffffff |
| Msapplication-TileImage |  |
| Msapplication-config | https://www.spymuseum.org/favicons/browserconfig.xml |
| Theme-color | #da001a |
| Description | Visit the International Spy Museum in Washington DC and step into the shoes of a spy. Experience DC's most immersive museum. Book your timed tickets online. |
Server nginx
Date Thu, 20 Aug 2026 16:17:35 GMT
Content-Type text/html;charset=UTF-8
Content-Length 10649
Connection keep-alive
X-Powered-By PleskLin
Expires Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control no-store, no-cache, must-revalidate
Pragma no-cache
Vary Accept-Encoding
Content-Encoding gzip
X-UA-Compatible IE=edge
X-Content-Type-Options nosniff
X-XSS-Protection 1; mode=block
X-Permitted-Cross-Domain-Policies master-only
Strict-Transport-Security max-age=15768000; includeSubDomains
