Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 2.21.35.194 |
| Server Software | Apache |
| Compression | gzip |
|
🔒 🟡 Mixed Content (11 HTTP resources) | The page is served over HTTPS but loads 11 resource(s) over HTTP. This may be blocked in modern browsers. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 2.21.35.194
Server Software Apache
Compression gzip
🔒 🟡 Mixed Content (11 HTTP resources) The page is served over HTTPS but loads 11 resource(s) over HTTP. This may be blocked in modern browsers.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://weather.gov:443 | 301 | HTTP/2 301 |
| 2 | https://www.weather.gov/ | 200 | HTTP/2 200 |
#1 URL https://weather.gov:443
HTTP Status Code 301
Status HTTP/2 301
#2 URL https://www.weather.gov/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 9.3 ms |
| TCP Connect | 10.2 ms |
| TLS Handshake | 8.8 ms |
| Time To First Byte (TTFB) | 109.2 ms |
| Content Download | 1.2 ms |
| Total Response Time | 110.4 ms |
DNS Lookup 9.3 ms
TCP Connect 10.2 ms
TLS Handshake 8.8 ms
Time To First Byte (TTFB) 109.2 ms
Content Download 1.2 ms
Total Response Time 110.4 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000 ; includeSubDomains ; preload |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | no-referrer |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000 ; includeSubDomains ; preload
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
Referrer Policy no-referrer
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | National Weather Service |
| Robots Meta | index,follow |
Title National Weather Service
Robots Meta index,follow
Detected Technologies
| Technology | jQuery Google Analytics Google Tag Manager Apache PHP |
Technology jQuery Google Analytics Google Tag Manager Apache PHP
HTTP Headers
| Server
| Apache |
| X-content-type-options
| nosniff |
| Referrer-policy
| no-referrer |
| Content-security-policy
| default-src 'self' *.weather.gov *.noaa.gov code.jquery.com cdn.gov.cfigroup.com s.go-mpulse.net *.digitalgov.gov *.google-analytics.com www.googletagmanager.com *.arcgis.com *.arcgisonline.com *.google.com *.youtube.com *.youtube-nocookie.com *.twitter.com *.x.com *.facebook.com data: * mediastream: * blob: * about: * 'unsafe-eval' 'unsafe-inline' |
| X-content-security-policy
| default-src 'self' 'unsafe-inline' 'unsafe-eval' * |
| X-xss-protection
| 1; mode=block |
| Content-encoding
| gzip |
| Access-control-allow-origin
| * |
| Content-length
| 28450 |
| Content-type
| text/html; charset=UTF-8 |
| Cache-control
| max-age=34 |
| Expires
| Wed, 19 Aug 2026 23:25:01 GMT |
| Date
| Wed, 19 Aug 2026 23:24:27 GMT |
| Vary
| Accept-Encoding |
| Strict-transport-security
| max-age=31536000 ; includeSubDomains ; preload |
Meta Tags
| DC.title | National Weather Service |
| DC.description | NOAA National Weather Service National Weather Service |
| DC.creator | US Department of Commerce, NOAA, National Weather Service |
| DC.language | EN-US |
| DC.keywords | weather, National Weather Service |
| DC.publisher | NOAA |
| DC.contributor | National Weather Service |
| DC.rights | /disclaimer.php |
| Rating | General |
| Robots | index,follow |
Server Apache
X-content-type-options nosniff
Referrer-policy no-referrer
Content-security-policy default-src 'self' *.weather.gov *.noaa.gov code.jquery.com cdn.gov.cfigroup.com s.go-mpulse.net *.digitalgov.gov *.google-analytics.com www.googletagmanager.com *.arcgis.com *.arcgisonline.com *.google.com *.youtube.com *.youtube-nocookie.com *.twitter.com *.x.com *.facebook.com data: * mediastream: * blob: * about: * 'unsafe-eval' 'unsafe-inline'
X-content-security-policy default-src 'self' 'unsafe-inline' 'unsafe-eval' *
X-xss-protection 1; mode=block
Content-encoding gzip
Access-control-allow-origin *
Content-length 28450
Content-type text/html; charset=UTF-8
Cache-control max-age=34
Expires Wed, 19 Aug 2026 23:25:01 GMT
Date Wed, 19 Aug 2026 23:24:27 GMT
Vary Accept-Encoding
Strict-transport-security max-age=31536000 ; includeSubDomains ; preload
