Información Técnica
| Código de estado HTTP | 200 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 13.227.231.117 |
| Software del servidor | nginx |
| Compresión | gzip |
Código de estado HTTP 200
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 13.227.231.117
Software del servidor nginx
Compresión gzip
Cadena de Redirecciones
| # | URL | Código de estado HTTP | Estado |
| 1 | https://onemaininsurance.com:443 | 301 | HTTP/2 301 |
| 2 | https://www.onemainsolutions.com/ | 200 | HTTP/2 200 |
#1 URL https://onemaininsurance.com:443
Código de estado HTTP 301
Estado HTTP/2 301
#2 URL https://www.onemainsolutions.com/
Código de estado HTTP 200
Estado HTTP/2 200
Rendimiento
| Resolución DNS | 30 ms |
| Conexión TCP | 112.6 ms |
| Negociación TLS | 85.1 ms |
| Tiempo hasta el primer byte (TTFB) | 365.8 ms |
| Descarga de contenido | 0.1 ms |
| Tiempo total de respuesta | 365.9 ms |
Resolución DNS 30 ms
Conexión TCP 112.6 ms
Negociación TLS 85.1 ms
Tiempo hasta el primer byte (TTFB) 365.8 ms
Descarga de contenido 0.1 ms
Tiempo total de respuesta 365.9 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=31536000; includeSubDomains; preload |
| CSP | ✔ Configurado |
| X-Frame-Options | ✔ sameorigin |
| X-Content-Type-Options | ✔ nosniff |
| Política de Permisos | ✔ Configurado |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=31536000; includeSubDomains; preload
CSP ✔ Configurado
X-Frame-Options ✔ sameorigin
X-Content-Type-Options ✔ nosniff
Política de Permisos ✔ Configurado
HTTP/2 ⚠ HTTP/1.1
Comprobación SEO
Título OneMain Solutions
Tecnologías Detectadas
| Tecnología | Google Analytics Nginx |
Tecnología Google Analytics Nginx
Cabeceras HTTP
| Date
| Mon, 27 Jul 2026 22:04:21 GMT |
| Content-type
| text/html; charset=utf-8 |
| Server
| nginx |
| Vary
| Accept-Encoding |
| Permissions-policy
| camera=(), gyroscope=(), microphone=(), usb=() ,fullscreen=(self), payment=() |
| X-sha
| 1a1df85ecf472946cf2f512d6cba55bd9f726313 |
| Link
| ; rel=preload; as=script; nopush,; rel=preload; as=style; nopush,; rel=preload; as=style; nopush,; rel=preload; as=script; integrity=sha256-OqMp1AztbKknoOvOIctRa94JgC50llncl8ezyKG9slE=; nopush,; rel=preload; as=script; integrity=sha256-lSKnnAyfcz3LrW27/1CRM+t6hTcSAJExerfouxb4KaM=; nopush,; rel=preload; as=script; integrity=sha256-ebw47X1hPEc4q3Eh7FwiUX1pOhMkeSb2Js5dogHXIp0=; nopush |
| Etag
| W/"b4ed804d3dbc7e83b4524344662e938e" |
| Cache-control
| private, no-store, no-cache |
| Set-cookie
| _insurance_session=LyhErxO2VP%2B1XXjaJssMLKCxajmlgaJaPcfg2MeS1r6B3z7VmBGqOGhjIrJDDtSbjN6ltaHoRQjoMPykfvYJWhxUmbJTpg%2FOL2r4tfGEBvSdL4F5%2Bx8Cajc94aNDw53JzBTkhDBxiv3dbEEMoAICHCxtylxzcwCTI2cUtOkClL%2FcV9%2FeZJoEloh1Z43h0Tz3FbQOUyOBfLePmrYAg4ddhXGgiHgrMSTJBitAUgikJkROsYXErISiNfTymv0zPtFWddbX%2BV9%2BLoNE5EpDbi0LRhMU9hH4m9oBbMX%2FjEpyW2hMyNSYCSp4e%2FGUNsV3GvlJoZCmkA0dlWKQ6lvIUqIS4BPQcM6zR63fBBnh0W8ehZtiQtlyLgQ3VxfeqlsNWwDj48FCAvlHmbccvEbMgE2Zx6FEO2Sx079q3jAPWm52sSCWEBeg0eJQAU5HjPFdeHxxC2fKMPlEmfHa%2BUIdKMF%2FKjzlm89iF%2BSu1H9V7BU0W37lYvDxxUYlJVk8RQdu7NRT07pI3VyLzu5dtAvZWy20ya8Tuq8bFEuMin2NHNHKFLOdgCVq%2Bwz3WPoohVqWTelHwL0SxZRaYHPAJpmF5rkWxQFUmAG8A5tECXo9%2FZX0dlvExubohf5Kq9KLk24A2STdSac%3D--4Y3rMEJPf3I2ivex--IIIsWDrmnnM%2BZizQ6BA9dg%3D%3D; path=/; secure; HttpOnly; SameSite=Lax |
| X-request-id
| b8174241dd0b14b54d066dbf2defb83f |
| X-runtime
| 0.069939 |
| X-frame-options
| sameorigin |
| X-content-type-options
| nosniff |
| X-xss-protection
| 1; mode=block |
| X-download-options
| noopen |
| X-permitted-cross-domain-policies
| master-only |
| Content-security-policy
| default-src https: 'self'; child-src https: 'self'; connect-src https: 'self' wws: wss:; font-src https: 'self' data:; frame-ancestors 'none'; img-src https: 'self' data:; script-src https: 'self' 'unsafe-inline' 'unsafe-eval' data:; style-src https: 'self' 'unsafe-inline' |
| Pragma
| no-cache |
| Content-encoding
| gzip |
| Strict-transport-security
| max-age=31536000; includeSubDomains; preload |
Meta Tags
| Csrf-param | authenticity_token |
| Csrf-token | VCgNPuXmIpKe3ZikweN3_WgKIeCjcyFIdBcIgVg26EGaz6VhRJC8y4AMgkDVTBkswfI8V6LmS1lZlC5mvc90Iw |
Date Mon, 27 Jul 2026 22:04:21 GMT
Content-type text/html; charset=utf-8
Server nginx
Vary Accept-Encoding
Permissions-policy camera=(), gyroscope=(), microphone=(), usb=() ,fullscreen=(self), payment=()
X-sha 1a1df85ecf472946cf2f512d6cba55bd9f726313
Link ; rel=preload; as=script; nopush,; rel=preload; as=style; nopush,; rel=preload; as=style; nopush,; rel=preload; as=script; integrity=sha256-OqMp1AztbKknoOvOIctRa94JgC50llncl8ezyKG9slE=; nopush,; rel=preload; as=script; integrity=sha256-lSKnnAyfcz3LrW27/1CRM+t6hTcSAJExerfouxb4KaM=; nopush,; rel=preload; as=script; integrity=sha256-ebw47X1hPEc4q3Eh7FwiUX1pOhMkeSb2Js5dogHXIp0=; nopush
Etag W/"b4ed804d3dbc7e83b4524344662e938e"
Cache-control private, no-store, no-cache
Set-cookie _insurance_session=LyhErxO2VP%2B1XXjaJssMLKCxajmlgaJaPcfg2MeS1r6B3z7VmBGqOGhjIrJDDtSbjN6ltaHoRQjoMPykfvYJWhxUmbJTpg%2FOL2r4tfGEBvSdL4F5%2Bx8Cajc94aNDw53JzBTkhDBxiv3dbEEMoAICHCxtylxzcwCTI2cUtOkClL%2FcV9%2FeZJoEloh1Z43h0Tz3FbQOUyOBfLePmrYAg4ddhXGgiHgrMSTJBitAUgikJkROsYXErISiNfTymv0zPtFWddbX%2BV9%2BLoNE5EpDbi0LRhMU9hH4m9oBbMX%2FjEpyW2hMyNSYCSp4e%2FGUNsV3GvlJoZCmkA0dlWKQ6lvIUqIS4BPQcM6zR63fBBnh0W8ehZtiQtlyLgQ3VxfeqlsNWwDj48FCAvlHmbccvEbMgE2Zx6FEO2Sx079q3jAPWm52sSCWEBeg0eJQAU5HjPFdeHxxC2fKMPlEmfHa%2BUIdKMF%2FKjzlm89iF%2BSu1H9V7BU0W37lYvDxxUYlJVk8RQdu7NRT07pI3VyLzu5dtAvZWy20ya8Tuq8bFEuMin2NHNHKFLOdgCVq%2Bwz3WPoohVqWTelHwL0SxZRaYHPAJpmF5rkWxQFUmAG8A5tECXo9%2FZX0dlvExubohf5Kq9KLk24A2STdSac%3D--4Y3rMEJPf3I2ivex--IIIsWDrmnnM%2BZizQ6BA9dg%3D%3D; path=/; secure; HttpOnly; SameSite=Lax
X-request-id b8174241dd0b14b54d066dbf2defb83f
X-runtime 0.069939
X-frame-options sameorigin
X-content-type-options nosniff
X-xss-protection 1; mode=block
X-download-options noopen
X-permitted-cross-domain-policies master-only
Content-security-policy default-src https: 'self'; child-src https: 'self'; connect-src https: 'self' wws: wss:; font-src https: 'self' data:; frame-ancestors 'none'; img-src https: 'self' data:; script-src https: 'self' 'unsafe-inline' 'unsafe-eval' data:; style-src https: 'self' 'unsafe-inline'
Pragma no-cache
Content-encoding gzip
Strict-transport-security max-age=31536000; includeSubDomains; preload
