Información Técnica
| Código de estado HTTP | 200 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 2.18.27.32 |
| Compresión | gzip |
|
ℹ 🔵 Falta X-Frame-Options | El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking). |
Código de estado HTTP 200
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 2.18.27.32
Compresión gzip
ℹ 🔵 Falta X-Frame-Options El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking).
Cadena de Redirecciones
| # | URL | Código de estado HTTP | Estado |
| 1 | https://burberry.com:443 | 301 | HTTP/1.1 301 Moved Permanently |
| 2 | https://www.burberry.com/ | 200 | HTTP/2 200 |
#1 URL https://burberry.com:443
Código de estado HTTP 301
Estado HTTP/1.1 301 Moved Permanently
#2 URL https://www.burberry.com/
Código de estado HTTP 200
Estado HTTP/2 200
Rendimiento
| Resolución DNS | 40.3 ms |
| Conexión TCP | 41.7 ms |
| Negociación TLS | 6.1 ms |
| Tiempo hasta el primer byte (TTFB) | 148.4 ms |
| Descarga de contenido | 15.3 ms |
| Tiempo total de respuesta | 163.7 ms |
Resolución DNS 40.3 ms
Conexión TCP 41.7 ms
Negociación TLS 6.1 ms
Tiempo hasta el primer byte (TTFB) 148.4 ms
Descarga de contenido 15.3 ms
Tiempo total de respuesta 163.7 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=31536000; |
| CSP | ✔ Configurado |
| X-Frame-Options | ⚠ No configurado |
| X-Content-Type-Options | ✔ nosniff |
| Política de Referrer | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=31536000;
CSP ✔ Configurado
X-Frame-Options ⚠ No configurado
X-Content-Type-Options ✔ nosniff
Política de Referrer strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
Tecnologías Detectadas
| Tecnología | React Google Analytics Google Tag Manager Cloudflare Node.js Next.js |
Tecnología React Google Analytics Google Tag Manager Cloudflare Node.js Next.js
Cabeceras HTTP
| Content-type
| text/html; charset=utf-8 |
| Referrer-policy
| strict-origin-when-cross-origin |
| X-dns-prefetch-control
| off |
| X-download-options
| noopen |
| X-permitted-cross-domain-policies
| none |
| Correlation-id
| d5de8525-d2bd-48fe-8828-1c36864b7af9 |
| Content-language
| en-GB |
| Etag
| "po5r2jbecx3nz0" |
| Content-encoding
| gzip |
| Content-length
| 46647 |
| Cache-control
| max-age=1150 |
| Expires
| Thu, 20 Aug 2026 05:06:26 GMT |
| Date
| Thu, 20 Aug 2026 04:47:16 GMT |
| Vary
| User-Agent |
| Content-security-policy
| default-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: *.adroll.com d.adroll.mgr.consensu.org *.dca0.com *.adyen.com *.akamaihd.net *.go-mpulse.net *.akstat.io *.aexp-static.com *.americanexpress.com tag.yieldoptimizer.com hm.baidu.com *.bambuser.com x.bidswitch.net bat.bing.com *.branch.io app.link s.thebrighttag.com s.btstatic.com *.brightcove.com *.brightcove.net *.brightcovecdn.com dpdb.webvr.rocks *.boltdns.net *.llnwd.net *.llnw.net vjs.zencdn.net *.burberry.com burberry.com cdnjs.cloudflare.com *.contentsquare.net script.crazyegg.com *.doubleclick.net connect.facebook.net www.facebook.com *.fitanalytics.com reporting.us1.fredhopperservices.com d1snv67wdds0p2.cloudfront.net collect-eu.attraqt.io analytics.google.com *.analytics.google.com *.googleapis.com *.googlesyndication.com *.gstatic.com adservice.google.com www.google.com *.google-analytics.com www.googleadservices.com www.googletagmanager.com www.googletagservices.com cdn.grata.cn *.usehero.com *.twilio.com wss://*.vss.twilio.com *.us1.twilio.com wss://*.us1.twilio.com *.eu1.twilio.com wss://*.eu1.twilio.com *.ipinyou.com www.ist-track.com x.klarnacdn.net *.klarna.com *.klarnaevt.com *.liveperson.net wss://*.liveperson.net *.lpsnmedia.net *.mathtag.com service.maxymiser.net bam.nr-data.net bam-cell.nr-data.net js-agent.newrelic.com cdn.cookielaw.org geolocation.onetrust.com privacyportal-eu.onetrust.com *.online-metrix.net *.openx.net *.optimizely.com cdn-assets-prod.s3.amazonaws.com optimizely.s3.amazonaws.com *.paypal.com www.personifyxpassets.com 7vr7bv2vla.execute-api.eu-west-1.amazonaws.com ct.pinterest.com s.pinimg.com *.qudini.com po.st s.po.st rp.gwallet.com *.rakuten.com *.nxtck.com *.xg4ken.com *.linksynergy.com intljs.rmtag.com ln-rules.rewardstyle.com *.richrelevance.com *.riskified.com sb.scorecardresearch.com *.shoprunner.com *.shoprunner.net shopstylecollective.com i.simpli.fi dabs7b6g7t59l.cloudfront.net *.sonobi.com *.spotify.com t.a3cloud.net p.teads.tv idsync.rlcdn.com *.turn.com analytics.twitter.com static.ads-twitter.com platform.twitter.com sp.analytics.yahoo.com s.yimg.com s.yimg.jp b97.yahoo.co.jp mc.yandex.ru *.zooz.com com-burberry-prod1.mini.snplow.net *.global-e.com hcaptcha.com *.hcaptcha.com web-assets-cdn.momentfeed.com api.momentfeed.com api.mapbox.com events.mapbox.com cdn.jsdelivr.net uberall.com maps.google.com *.configcat.com *.shopstylecollective.com app.collectivevoice.com app.collectivevoiceqa.com analytics.tiktok.com www.youtube.com *.adsrvr.org tag.wknd.ai events.bouncex.net *.cdnwidget.com *.cdnbasket.net *.bounceexchange.com cms.analytics.yahoo.com web.analytics.yahoo.com analytics.query.yahoo.com e.analytics.yahoo.com b99.yahoo.co.jp b98.yahoo.co.jp wcs.naver.net wcs.naver.com *.starsbuildingweb.com *.teads.tv cdn.attraqt.io analytics-ipv6.tiktokw.us app.contentsquare.com; style-src * data: 'unsafe-inline'; img-src * data:; font-src * data:; media-src * blob:; object-src 'self'; frame-ancestors 'self' *.burberry.com burberry.com; base-uri 'self'; upgrade-insecure-requests; report-uri https://csp.apps.burberry.com/brby |
| X-content-type-options
| nosniff |
| X-xss-protection
| 1; mode=block |
| Link
| ; rel="preconnect", ; rel="preconnect", ; rel="preconnect" |
| Origin-agent-cluster
| ?0 |
| Strict-transport-security
| max-age=31536000; |
Meta Tags
| Viewport | width=device-width |
| Naver-site-verification | aba1742d0c31dbd42902f09c2c44ea7def9b3b12 |
Content-type text/html; charset=utf-8
Referrer-policy strict-origin-when-cross-origin
X-dns-prefetch-control off
X-download-options noopen
X-permitted-cross-domain-policies none
Correlation-id d5de8525-d2bd-48fe-8828-1c36864b7af9
Content-language en-GB
Etag "po5r2jbecx3nz0"
Content-encoding gzip
Content-length 46647
Cache-control max-age=1150
Expires Thu, 20 Aug 2026 05:06:26 GMT
Date Thu, 20 Aug 2026 04:47:16 GMT
Vary User-Agent
Content-security-policy default-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: *.adroll.com d.adroll.mgr.consensu.org *.dca0.com *.adyen.com *.akamaihd.net *.go-mpulse.net *.akstat.io *.aexp-static.com *.americanexpress.com tag.yieldoptimizer.com hm.baidu.com *.bambuser.com x.bidswitch.net bat.bing.com *.branch.io app.link s.thebrighttag.com s.btstatic.com *.brightcove.com *.brightcove.net *.brightcovecdn.com dpdb.webvr.rocks *.boltdns.net *.llnwd.net *.llnw.net vjs.zencdn.net *.burberry.com burberry.com cdnjs.cloudflare.com *.contentsquare.net script.crazyegg.com *.doubleclick.net connect.facebook.net www.facebook.com *.fitanalytics.com reporting.us1.fredhopperservices.com d1snv67wdds0p2.cloudfront.net collect-eu.attraqt.io analytics.google.com *.analytics.google.com *.googleapis.com *.googlesyndication.com *.gstatic.com adservice.google.com www.google.com *.google-analytics.com www.googleadservices.com www.googletagmanager.com www.googletagservices.com cdn.grata.cn *.usehero.com *.twilio.com wss://*.vss.twilio.com *.us1.twilio.com wss://*.us1.twilio.com *.eu1.twilio.com wss://*.eu1.twilio.com *.ipinyou.com www.ist-track.com x.klarnacdn.net *.klarna.com *.klarnaevt.com *.liveperson.net wss://*.liveperson.net *.lpsnmedia.net *.mathtag.com service.maxymiser.net bam.nr-data.net bam-cell.nr-data.net js-agent.newrelic.com cdn.cookielaw.org geolocation.onetrust.com privacyportal-eu.onetrust.com *.online-metrix.net *.openx.net *.optimizely.com cdn-assets-prod.s3.amazonaws.com optimizely.s3.amazonaws.com *.paypal.com www.personifyxpassets.com 7vr7bv2vla.execute-api.eu-west-1.amazonaws.com ct.pinterest.com s.pinimg.com *.qudini.com po.st s.po.st rp.gwallet.com *.rakuten.com *.nxtck.com *.xg4ken.com *.linksynergy.com intljs.rmtag.com ln-rules.rewardstyle.com *.richrelevance.com *.riskified.com sb.scorecardresearch.com *.shoprunner.com *.shoprunner.net shopstylecollective.com i.simpli.fi dabs7b6g7t59l.cloudfront.net *.sonobi.com *.spotify.com t.a3cloud.net p.teads.tv idsync.rlcdn.com *.turn.com analytics.twitter.com static.ads-twitter.com platform.twitter.com sp.analytics.yahoo.com s.yimg.com s.yimg.jp b97.yahoo.co.jp mc.yandex.ru *.zooz.com com-burberry-prod1.mini.snplow.net *.global-e.com hcaptcha.com *.hcaptcha.com web-assets-cdn.momentfeed.com api.momentfeed.com api.mapbox.com events.mapbox.com cdn.jsdelivr.net uberall.com maps.google.com *.configcat.com *.shopstylecollective.com app.collectivevoice.com app.collectivevoiceqa.com analytics.tiktok.com www.youtube.com *.adsrvr.org tag.wknd.ai events.bouncex.net *.cdnwidget.com *.cdnbasket.net *.bounceexchange.com cms.analytics.yahoo.com web.analytics.yahoo.com analytics.query.yahoo.com e.analytics.yahoo.com b99.yahoo.co.jp b98.yahoo.co.jp wcs.naver.net wcs.naver.com *.starsbuildingweb.com *.teads.tv cdn.attraqt.io analytics-ipv6.tiktokw.us app.contentsquare.com; style-src * data: 'unsafe-inline'; img-src * data:; font-src * data:; media-src * blob:; object-src 'self'; frame-ancestors 'self' *.burberry.com burberry.com; base-uri 'self'; upgrade-insecure-requests; report-uri https://csp.apps.burberry.com/brby
X-content-type-options nosniff
X-xss-protection 1; mode=block
Link ; rel="preconnect", ; rel="preconnect", ; rel="preconnect"
Origin-agent-cluster ?0
Strict-transport-security max-age=31536000;