Información Técnica
| Código de estado HTTP | 200 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 13.227.173.9 |
| CDN | CDN (Miss from cloudfront) |
| Compresión | gzip |
|
ℹ 🔵 Falta Content Security Policy | No se ha configurado CSP. Ayuda a prevenir ataques XSS e inyección de contenido. |
Código de estado HTTP 200
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 13.227.173.9
CDN CDN (Miss from cloudfront)
Compresión gzip
ℹ 🔵 Falta Content Security Policy No se ha configurado CSP. Ayuda a prevenir ataques XSS e inyección de contenido.
Cadena de Redirecciones
| # | URL | Código de estado HTTP | Estado |
| 1 | https://niftygateway.com:443 | 302 | HTTP/2 302 |
| 2 | https://www.niftygateway.com/ | 200 | HTTP/2 200 |
#1 URL https://niftygateway.com:443
Código de estado HTTP 302
Estado HTTP/2 302
#2 URL https://www.niftygateway.com/
Código de estado HTTP 200
Estado HTTP/2 200
Rendimiento
| Resolución DNS | 10.4 ms |
| Conexión TCP | 11.3 ms |
| Negociación TLS | 6 ms |
| Tiempo hasta el primer byte (TTFB) | 248.8 ms |
| Descarga de contenido | 0.2 ms |
| Tiempo total de respuesta | 249 ms |
Resolución DNS 10.4 ms
Conexión TCP 11.3 ms
Negociación TLS 6 ms
Tiempo hasta el primer byte (TTFB) 248.8 ms
Descarga de contenido 0.2 ms
Tiempo total de respuesta 249 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=15552000; includeSubDomains |
| CSP | ⚠ No configurado |
| X-Frame-Options | ✔ DENY |
| X-Content-Type-Options | ✔ nosniff |
| Política de Referrer | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=15552000; includeSubDomains
CSP ⚠ No configurado
X-Frame-Options ✔ DENY
X-Content-Type-Options ✔ nosniff
Política de Referrer strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
Tecnologías Detectadas
| Tecnología | Google Analytics Google Tag Manager Next.js Stripe |
Tecnología Google Analytics Google Tag Manager Next.js Stripe
Cabeceras HTTP
| Content-type
| text/html; charset=utf-8 |
| Date
| Thu, 23 Jul 2026 12:56:24 GMT |
| Etag
| "11xnx44jmpazzv" |
| Content-encoding
| gzip |
| Content-security-policy-report-only
| default-src 'self' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https:// connect.facebook.net/ https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://api.sardine.ai https://static.zdassets.com/ https://ekr.zdassets https://ekr.zendesk.com https://*.zopim.com wss://demonifty.zendesk.com wss://*.zopim.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://edge.fullstory.com/s/ https://static.ads-twitter.com/uwt.js https://sc-static.net/ https://googleads.g.doubleclick.net/ https://tr.snapchat.com; style-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://fonts.googleapis.com *.live-video.net; script-src-elem 'self' 'unsafe-inline' https://js.stripe.com https://api.dev.sardine.ai https://edge.fullstory.com https://www.googletagmanager.com/gtag/js https://connect.facebook.net https://static.ads-twitter.com/uwt.js https://sc-static.net/scevent.min.js https://www.google.com/recaptcha/ https://static.zdassets.com/ https://www.gstatic.com/recaptcha/ https://tr.snapchat.com/ https://www.google-analytics.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://api.sardine.ai https://unpkg.com/@google/model-viewer/dist/model-viewer.min.js https://www.youtube.com https://www.googleoptimize.com https://www.clarity.ms *.live-video.net; img-src https: blob: data:; connect-src https://browser-intake-datadoghq.com https://www.niftygateway.com https://niftygateway.com https://analytics.google.com https://*.clarity.ms https://niftygateway.zendesk.com https://api.niftygateway.com https://odysseymarket.niftygateway.com https://api.sandbox.niftygateway.com https://stats.g.doubleclick.net https://www.facebook.com/tr/ https://www.google-analytics.com https://www.clarity.ms wss://widget-mediator.zopim.com https://nifty-qa100.service.aws-qa.sd.gem.link https://demonifty.zendesk.com https://ekr.zdassets.com https://encrypted-tbn0.gstatic.com/images https://lh3.googleusercontent.com https://tr.snapchat.com https://eth-goerli.alchemyapi.io https://search-api-staging.s-niftygateway-001-use1.svc.gem.link https://search-api.niftygateway.com https://search-api-dev.d-niftygateway-001-use1.svc.gem.link https://ipfs.io https://rs.fullstory.com https://session-replay.browser-intake-datadoghq.com https://eth-mainnet.alchemyapi.io https://api.cloudinary.com/v1_1/nifty_gateway/auto/upload https://openseauserdata.com https://rum.browser-intake-datadoghq.com https://api.x.immutable.com https://i.seadn.io https://cdn.optimizely.com https://img.seadn.io https://storage.opensea.io https://api.opensea.io https://sdk.iad-03.braze.com *.live-video.net ; font-src https://fonts.gstatic.com https://use.typekit.net/ 'self'; object-src 'self'; media-src https://media.niftygateway.com https://static.zdassets.com https://openseauserdata.com https://storage.opensea.io https://res.cloudinary.com blob:; frame-src https://js.stripe.com https://www.google.com https://api.sardine.ai https://api.dev.sardine.ai https://tr.snapchat.com/ https://www.youtube.com https://webusprd01.ihsmtaxsolutions.com/Nifty/ https://td.doubleclick.net/; frame-ancestors 'self'; worker-src blob:; |
| Referrer-policy
| strict-origin-when-cross-origin |
| Strict-transport-security
| max-age=15552000; includeSubDomains |
| X-content-type-options
| nosniff |
| X-frame-options
| DENY |
| X-time
| 1784811384705 |
| X-nextjs-cache
| HIT |
| X-powered-by
| Next.js |
| Cache-control
| no-cache,no-store,must-revalidate |
| Vary
| Accept-Encoding |
| X-cache
| Miss from cloudfront |
| Via
| 1.1 69fb751e8b7a6bdd34ddc1b4a6792520.cloudfront.net (CloudFront) |
| X-amz-cf-pop
| CDG54-P2 |
| Alt-svc
| h3=":443"; ma=86400 |
| X-amz-cf-id
| bbX7InRGzGs1uDxN5Cd_IgJY23Mk7R_OsFaWGWCvokISBmHQNKKr-Q== |
Meta Tags
| Viewport | width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no |
Content-type text/html; charset=utf-8
Date Thu, 23 Jul 2026 12:56:24 GMT
Etag "11xnx44jmpazzv"
Content-encoding gzip
Content-security-policy-report-only default-src 'self' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https:// connect.facebook.net/ https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://api.sardine.ai https://static.zdassets.com/ https://ekr.zdassets https://ekr.zendesk.com https://*.zopim.com wss://demonifty.zendesk.com wss://*.zopim.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://edge.fullstory.com/s/ https://static.ads-twitter.com/uwt.js https://sc-static.net/ https://googleads.g.doubleclick.net/ https://tr.snapchat.com; style-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://fonts.googleapis.com *.live-video.net; script-src-elem 'self' 'unsafe-inline' https://js.stripe.com https://api.dev.sardine.ai https://edge.fullstory.com https://www.googletagmanager.com/gtag/js https://connect.facebook.net https://static.ads-twitter.com/uwt.js https://sc-static.net/scevent.min.js https://www.google.com/recaptcha/ https://static.zdassets.com/ https://www.gstatic.com/recaptcha/ https://tr.snapchat.com/ https://www.google-analytics.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://api.sardine.ai https://unpkg.com/@google/model-viewer/dist/model-viewer.min.js https://www.youtube.com https://www.googleoptimize.com https://www.clarity.ms *.live-video.net; img-src https: blob: data:; connect-src https://browser-intake-datadoghq.com https://www.niftygateway.com https://niftygateway.com https://analytics.google.com https://*.clarity.ms https://niftygateway.zendesk.com https://api.niftygateway.com https://odysseymarket.niftygateway.com https://api.sandbox.niftygateway.com https://stats.g.doubleclick.net https://www.facebook.com/tr/ https://www.google-analytics.com https://www.clarity.ms wss://widget-mediator.zopim.com https://nifty-qa100.service.aws-qa.sd.gem.link https://demonifty.zendesk.com https://ekr.zdassets.com https://encrypted-tbn0.gstatic.com/images https://lh3.googleusercontent.com https://tr.snapchat.com https://eth-goerli.alchemyapi.io https://search-api-staging.s-niftygateway-001-use1.svc.gem.link https://search-api.niftygateway.com https://search-api-dev.d-niftygateway-001-use1.svc.gem.link https://ipfs.io https://rs.fullstory.com https://session-replay.browser-intake-datadoghq.com https://eth-mainnet.alchemyapi.io https://api.cloudinary.com/v1_1/nifty_gateway/auto/upload https://openseauserdata.com https://rum.browser-intake-datadoghq.com https://api.x.immutable.com https://i.seadn.io https://cdn.optimizely.com https://img.seadn.io https://storage.opensea.io https://api.opensea.io https://sdk.iad-03.braze.com *.live-video.net ; font-src https://fonts.gstatic.com https://use.typekit.net/ 'self'; object-src 'self'; media-src https://media.niftygateway.com https://static.zdassets.com https://openseauserdata.com https://storage.opensea.io https://res.cloudinary.com blob:; frame-src https://js.stripe.com https://www.google.com https://api.sardine.ai https://api.dev.sardine.ai https://tr.snapchat.com/ https://www.youtube.com https://webusprd01.ihsmtaxsolutions.com/Nifty/ https://td.doubleclick.net/; frame-ancestors 'self'; worker-src blob:;
Referrer-policy strict-origin-when-cross-origin
Strict-transport-security max-age=15552000; includeSubDomains
X-content-type-options nosniff
X-frame-options DENY
X-time 1784811384705
X-nextjs-cache HIT
X-powered-by Next.js
Cache-control no-cache,no-store,must-revalidate
Vary Accept-Encoding
X-cache Miss from cloudfront
Via 1.1 69fb751e8b7a6bdd34ddc1b4a6792520.cloudfront.net (CloudFront)
X-amz-cf-pop CDG54-P2
Alt-svc h3=":443"; ma=86400
X-amz-cf-id bbX7InRGzGs1uDxN5Cd_IgJY23Mk7R_OsFaWGWCvokISBmHQNKKr-Q==
