Technical Information
| HTTP Status Code | 403 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 151.101.66.98 |
| Server Software | DataDome |
| CDN | CDN (MISS) |
|
🚫 🟡 HTTP 403 Error | The server returned a 403 error. Check the access configuration. |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 403
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 151.101.66.98
Server Software DataDome
CDN CDN (MISS)
🚫 🟡 HTTP 403 Error The server returned a 403 error. Check the access configuration.
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Performance
| DNS Lookup | 13.6 ms |
| TCP Connect | 14.4 ms |
| TLS Handshake | 4.4 ms |
| Time To First Byte (TTFB) | 35.2 ms |
| Content Download | 0 ms |
| Total Response Time | 35.3 ms |
DNS Lookup 13.6 ms
TCP Connect 14.4 ms
TLS Handshake 4.4 ms
Time To First Byte (TTFB) 35.2 ms
Content Download 0 ms
Total Response Time 35.3 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31557600 |
| CSP | ⚠ Not configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ⚠ Not configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31557600
CSP ⚠ Not configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ⚠ Not configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
Title thespun.com
Detected Technologies
| Technology | Google Analytics |
Technology Google Analytics
HTTP Headers
| Content-type | text/html;charset=utf-8 |
| Server | DataDome |
| X-datadome | protected |
| Accept-ch | Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory |
| X-datadome-devicecheckpassed | NA |
| X-datadome-traffic-rule-response | block |
| Charset | utf-8 |
| Cache-control | max-age=0, private, no-cache, no-store, must-revalidate |
| Pragma | no-cache |
| Access-control-allow-credentials | true |
| Access-control-expose-headers | x-dd-b, x-set-cookie |
| Access-control-allow-origin | * |
| X-datadome-cid | AHrlqAAAAAMARqpRL7ZQMBAANC_MAg== |
| X-dd-b | 1 |
| Set-cookie | datadome=yqPQ9KKqMtin8w2MQ_aFXG91xCciGVh4EafLqMmqFnBLflITLfzrhyOmNnQoKb7Ji8U9bsqSdzle0duMAdxVmDN3xp_9GiNkfrsp9rJF5jJeABtaM6vzS3BPUa42h1aR; Max-Age=31536000; Domain=.thespun.com; Path=/; Secure; SameSite=Lax |
| X-datadome-cookie | datadome=yqPQ9KKqMtin8w2MQ_aFXG91xCciGVh4EafLqMmqFnBLflITLfzrhyOmNnQoKb7Ji8U9bsqSdzle0duMAdxVmDN3xp_9GiNkfrsp9rJF5jJeABtaM6vzS3BPUa42h1aR; Max-Age=31536000; Domain=.thespun.com; Path=/; Secure; SameSite=Lax |
| X-saycdn-ttl | 0.000 |
| Accept-ranges | bytes |
| Date | Sun, 23 Aug 2026 15:01:18 GMT |
| Via | 1.1 varnish |
| X-served-by | cache-par-lfpg1960021-PAR |
| X-cache | MISS |
| X-cache-hits | 0 |
| X-timer | S1787497279.963735,VS0,VE12 |
| Strict-transport-security | max-age=31557600 |
| Reporting-endpoints | crash-reporting="https://thespun.com/.api/crash-reports" |
| Document-policy | include-js-call-stacks-in-crash-reports |
| Server-timing | time-start-msec;dur=1787497278964,time-elapsed;dur=12,fastly-pop;desc=PAR,hit-state;desc=PASS |
| Content-length | 771 |
Content-type text/html;charset=utf-8
Server DataDome
X-datadome protected
Accept-ch Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-datadome-devicecheckpassed NA
X-datadome-traffic-rule-response block
Charset utf-8
Cache-control max-age=0, private, no-cache, no-store, must-revalidate
Pragma no-cache
Access-control-allow-credentials true
Access-control-expose-headers x-dd-b, x-set-cookie
Access-control-allow-origin *
X-datadome-cid AHrlqAAAAAMARqpRL7ZQMBAANC_MAg==
X-dd-b 1
Set-cookie datadome=yqPQ9KKqMtin8w2MQ_aFXG91xCciGVh4EafLqMmqFnBLflITLfzrhyOmNnQoKb7Ji8U9bsqSdzle0duMAdxVmDN3xp_9GiNkfrsp9rJF5jJeABtaM6vzS3BPUa42h1aR; Max-Age=31536000; Domain=.thespun.com; Path=/; Secure; SameSite=Lax
X-datadome-cookie datadome=yqPQ9KKqMtin8w2MQ_aFXG91xCciGVh4EafLqMmqFnBLflITLfzrhyOmNnQoKb7Ji8U9bsqSdzle0duMAdxVmDN3xp_9GiNkfrsp9rJF5jJeABtaM6vzS3BPUa42h1aR; Max-Age=31536000; Domain=.thespun.com; Path=/; Secure; SameSite=Lax
X-saycdn-ttl 0.000
Accept-ranges bytes
Date Sun, 23 Aug 2026 15:01:18 GMT
Via 1.1 varnish
X-served-by cache-par-lfpg1960021-PAR
X-cache MISS
X-cache-hits 0
X-timer S1787497279.963735,VS0,VE12
Strict-transport-security max-age=31557600
Reporting-endpoints crash-reporting="https://thespun.com/.api/crash-reports"
Document-policy include-js-call-stacks-in-crash-reports
Server-timing time-start-msec;dur=1787497278964,time-elapsed;dur=12,fastly-pop;desc=PAR,hit-state;desc=PASS
Content-length 771
