Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 138.197.62.195 |
| Compression | gzip |
|
ℹ 🔵 Missing HSTS | HTTP Strict Transport Security is not configured. Recommended for HTTPS sites. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 138.197.62.195
Compression gzip
ℹ 🔵 Missing HSTS HTTP Strict Transport Security is not configured. Recommended for HTTPS sites.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Performance
| DNS Lookup | 36.8 ms |
| TCP Connect | 129.1 ms |
| TLS Handshake | 99.7 ms |
| Time To First Byte (TTFB) | 450.9 ms |
| Content Download | 92.4 ms |
| Total Response Time | 543.4 ms |
DNS Lookup 36.8 ms
TCP Connect 129.1 ms
TLS Handshake 99.7 ms
Time To First Byte (TTFB) 450.9 ms
Content Download 92.4 ms
Total Response Time 543.4 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✘ Not configured |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✘ Not configured
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
Detected Technologies
| Technology | Google Analytics Google Tag Manager |
Technology Google Analytics Google Tag Manager
HTTP Headers
| Alt-svc
| h3=":443"; ma=2592000 |
| Cache-control
| max-age=0, private, must-revalidate |
| Content-encoding
| gzip |
| Content-security-policy
| frame-ancestors https://*.whitney.org http://localhost:* |
| Content-type
| text/html; charset=utf-8 |
| Etag
| W/"fd58116d69b16a62cec0ad5c099db56a" |
| Link
| ; rel=preload; as=style; nopush,; rel=modulepreload; as=script; nopush,; rel=modulepreload; as=script; nopush |
| Referrer-policy
| strict-origin-when-cross-origin |
| Set-cookie
| _whitney_session=HmDr4g2P4KmG%2BPjsuDXOHEapM5mNIelZPlqkLp%2B15RekfMVUCXpBqEw7Rs%2FUc5yguJKx6WK%2BrIc%2B%2BDEZC41KciVQ23ZdR5ltSwcQQvFzHhw0bE7ayMERngrlYpTiD4wTvM2%2Btyzm7p5sLs0wYvAx%2BiJh%2FArxNiCOhfhXIKKCTzCKvxb0cX0OTWXQ46Z7gTwmWQXcE6aHMQebOkvbRxP3gLyBKIrgm1D5cltYEHdxLzfHo3Ke8d61rQ2Rjkny%2FcUb%2BuK7DJanhPtJeDknrurybPEdL0uCCXix--%2B0TwNxd9JObPpNOg--n75HVAXzw57sUBNx8xFWBQ%3D%3D; domain=whitney.org; path=/; secure; httponly; samesite=lax |
| Vary
| Accept-Encoding |
| Via
| 1.1 Caddy |
| X-content-type-options
| nosniff |
| X-permitted-cross-domain-policies
| none |
| X-request-id
| 7366dcb5-766e-4c84-bc0e-6e9c0c10d35d |
| X-runtime
| 0.125231 |
| X-xss-protection
| 0 |
| Date
| Fri, 28 Aug 2026 13:51:37 GMT |
Meta Tags
| Viewport | width=device-width, initial-scale=1, viewport-fit=cover |
| Google-site-verification | 7H-upWFqE2QIpO83eIsNxpEUchG7lrWFMOZlOzoM3GI |
| Theme-color | #FFFFFF |
| Color-scheme | dark light |
| Turbo-cache-control | no-cache |
| Turbo-prefetch | false |
| Description | The Whitney Museum of American Art. Explore works, exhibitions, and events online. Located in New York City. |
| Csrf-param | authenticity_token |
| Csrf-token | Rnw1PBG_MvfhKdTouRQPnsgH7_Hr30CBFumEnziuJizc5iui1o5H_8M44bx9WQStZ2idrahExidvoXfvGV5ZMQ |
| Action-cable-url | /cable |
Alt-svc h3=":443"; ma=2592000
Cache-control max-age=0, private, must-revalidate
Content-encoding gzip
Content-security-policy frame-ancestors https://*.whitney.org http://localhost:*
Content-type text/html; charset=utf-8
Etag W/"fd58116d69b16a62cec0ad5c099db56a"
Link ; rel=preload; as=style; nopush,; rel=modulepreload; as=script; nopush,; rel=modulepreload; as=script; nopush
Referrer-policy strict-origin-when-cross-origin
Set-cookie _whitney_session=HmDr4g2P4KmG%2BPjsuDXOHEapM5mNIelZPlqkLp%2B15RekfMVUCXpBqEw7Rs%2FUc5yguJKx6WK%2BrIc%2B%2BDEZC41KciVQ23ZdR5ltSwcQQvFzHhw0bE7ayMERngrlYpTiD4wTvM2%2Btyzm7p5sLs0wYvAx%2BiJh%2FArxNiCOhfhXIKKCTzCKvxb0cX0OTWXQ46Z7gTwmWQXcE6aHMQebOkvbRxP3gLyBKIrgm1D5cltYEHdxLzfHo3Ke8d61rQ2Rjkny%2FcUb%2BuK7DJanhPtJeDknrurybPEdL0uCCXix--%2B0TwNxd9JObPpNOg--n75HVAXzw57sUBNx8xFWBQ%3D%3D; domain=whitney.org; path=/; secure; httponly; samesite=lax
Vary Accept-Encoding
Via 1.1 Caddy
X-content-type-options nosniff
X-permitted-cross-domain-policies none
X-request-id 7366dcb5-766e-4c84-bc0e-6e9c0c10d35d
X-runtime 0.125231
X-xss-protection 0
Date Fri, 28 Aug 2026 13:51:37 GMT
