Technical Information
| HTTP Status Code | 403 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 76.76.21.21 |
| Server Software | Vercel |
| CDN | Vercel |
| Compression | gzip |
|
🚫 🟡 HTTP 403 Error | The server returned a 403 error. Check the access configuration. |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 403
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 76.76.21.21
Server Software Vercel
CDN Vercel
Compression gzip
🚫 🟡 HTTP 403 Error The server returned a 403 error. Check the access configuration.
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://thebody.com:443 | 308 | HTTP/2 308 |
| 2 | https://www.thebody.com/ | 403 | HTTP/2 403 |
#1 URL https://thebody.com:443
HTTP Status Code 308
Status HTTP/2 308
#2 URL https://www.thebody.com/
HTTP Status Code 403
Status HTTP/2 403
Performance
| DNS Lookup | 5.2 ms |
| TCP Connect | 5.9 ms |
| TLS Handshake | 6.6 ms |
| Time To First Byte (TTFB) | 62.3 ms |
| Content Download | 0.1 ms |
| Total Response Time | 62.4 ms |
DNS Lookup 5.2 ms
TCP Connect 5.9 ms
TLS Handshake 6.6 ms
Time To First Byte (TTFB) 62.3 ms
Content Download 0.1 ms
Total Response Time 62.4 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=63072000 |
| CSP | ⚠ Not configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ⚠ Not configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=63072000
CSP ⚠ Not configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ⚠ Not configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
Title thebody.com
HTTP Headers
| Accept-ch | Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory |
| Access-control-allow-credentials | true |
| Access-control-allow-origin | * |
| Access-control-expose-headers | x-dd-b, x-set-cookie |
| Cache-control | max-age=0, private, no-cache, no-store, must-revalidate |
| Charset | utf-8 |
| Content-encoding | gzip |
| Content-type | text/html;charset=utf-8 |
| Date | Thu, 20 Aug 2026 07:36:43 GMT |
| Pragma | no-cache |
| Server | Vercel |
| Set-cookie | datadome=2noCeQmHMHhuVWN8S487hSo32naGjjuxWCV72FdgtXdkcHYu74QPTF7EJoBB5uBTF56loni64fl5cAdI8GH7w8s7BBuXl92cECVPJDOKoDcAOyEb~F2_nuXIkF2wDvSz; Max-Age=31536000; Domain=.thebody.com; Path=/; Secure; SameSite=Lax |
| Strict-transport-security | max-age=63072000 |
| X-datadome | protected |
| X-datadome-cid | AHrlqAAAAAMA-uLouCeO6o8ANC_MAg== |
| X-dd-b | 1 |
| X-vercel-id | cdg1::qvkfz-1787211403546-ba22a5867f42 |
Accept-ch Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Access-control-allow-credentials true
Access-control-allow-origin *
Access-control-expose-headers x-dd-b, x-set-cookie
Cache-control max-age=0, private, no-cache, no-store, must-revalidate
Charset utf-8
Content-encoding gzip
Content-type text/html;charset=utf-8
Date Thu, 20 Aug 2026 07:36:43 GMT
Pragma no-cache
Server Vercel
Set-cookie datadome=2noCeQmHMHhuVWN8S487hSo32naGjjuxWCV72FdgtXdkcHYu74QPTF7EJoBB5uBTF56loni64fl5cAdI8GH7w8s7BBuXl92cECVPJDOKoDcAOyEb~F2_nuXIkF2wDvSz; Max-Age=31536000; Domain=.thebody.com; Path=/; Secure; SameSite=Lax
Strict-transport-security max-age=63072000
X-datadome protected
X-datadome-cid AHrlqAAAAAMA-uLouCeO6o8ANC_MAg==
X-dd-b 1
X-vercel-id cdg1::qvkfz-1787211403546-ba22a5867f42
