Información Técnica
| Código de estado HTTP | 200 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 202.134.12.124 |
| Compresión | gzip |
|
🕐 🟡 Respuesta lenta (1455 ms) | El tiempo de respuesta supera 1 segundo. Considera optimizar el servidor o usar caché. |
|
ℹ 🔵 Falta X-Frame-Options | El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking). |
Código de estado HTTP 200
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 202.134.12.124
Compresión gzip
🕐 🟡 Respuesta lenta (1455 ms) El tiempo de respuesta supera 1 segundo. Considera optimizar el servidor o usar caché.
ℹ 🔵 Falta X-Frame-Options El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking).
Cadena de Redirecciones
| # | URL | Código de estado HTTP | Estado |
| 1 | https://robi.com.bd:443 | 301 | HTTP/1.1 301 Moved Permanently |
| 2 | https://www.robi.com.bd/ | 307 | HTTP/1.1 307 Temporary Redirect |
| 3 | https://www.robi.com.bd/en | 200 | HTTP/1.1 200 OK |
#1 URL https://robi.com.bd:443
Código de estado HTTP 301
Estado HTTP/1.1 301 Moved Permanently
#2 URL https://www.robi.com.bd/
Código de estado HTTP 307
Estado HTTP/1.1 307 Temporary Redirect
#3 URL https://www.robi.com.bd/en
Código de estado HTTP 200
Estado HTTP/1.1 200 OK
Rendimiento
| Resolución DNS | 5.2 ms |
| Conexión TCP | 205.1 ms |
| Negociación TLS | 404.2 ms |
| Tiempo hasta el primer byte (TTFB) | 851.2 ms |
| Descarga de contenido | 604.2 ms |
| Tiempo total de respuesta | 1455.4 ms |
Resolución DNS 5.2 ms
Conexión TCP 205.1 ms
Negociación TLS 404.2 ms
Tiempo hasta el primer byte (TTFB) 851.2 ms
Descarga de contenido 604.2 ms
Tiempo total de respuesta 1455.4 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=31536000; includeSubDomains |
| CSP | ✔ Configurado |
| X-Frame-Options | ⚠ No configurado |
| X-Content-Type-Options | ✔ nosniff |
| Política de Referrer | same-origin |
| Política de Permisos | ✔ Configurado |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=31536000; includeSubDomains
CSP ✔ Configurado
X-Frame-Options ⚠ No configurado
X-Content-Type-Options ✔ nosniff
Política de Referrer same-origin
Política de Permisos ✔ Configurado
HTTP/2 ⚠ HTTP/1.1
Comprobación SEO
| Título | My Robi |
| Meta descripción | My Robi App |
Título My Robi
Meta descripción My Robi App
Tecnologías Detectadas
| Tecnología | React Google Analytics Google Tag Manager Node.js Next.js |
Tecnología React Google Analytics Google Tag Manager Node.js Next.js
Cabeceras HTTP
| Cache-Control
| private, no-cache, no-store, max-age=0, must-revalidate |
| Content-Encoding
| gzip |
| Content-Security-Policy
| default-src 'self'; script-src 'self' 'unsafe-inline' https://*.bka.sh https://*.google.com https://www.youtube.com https://cdn.userway.org https://www.googletagmanager.com https://analytics.tiktok.com https://connect.facebook.net https://livechat.myalice.ai; style-src 'self' 'unsafe-inline' https://*.bka.sh https://cdn.userway.org https://fonts.googleapis.com; img-src 'self' data: blob: https://*.bka.sh https://www.facebook.com https://s3-ap-southeast-1.amazonaws.com https://webapi.robi.com.bd https://webapi-preprod.robi.com.bd https://storage.googleapis.com https://cdn.userway.org https://connect.facebook.net https://www.google.com.bd https://myrobi-prod-static.robi.com.bd; connect-src 'self' https://*.bka.sh https://*.googleapis.com https://securetoken.googleapis.com https://payment.bkash.com https://sg-channels.mevrik.com https://webapi.robi.com.bd https://map.barikoi.com https://tiles.bmapsbd.com https://planet.tiles.bmapsbd.com https://api.userway.org https://robi-api.myalice.ai wss://ws-ap1.pusher.com https://sockjs-ap1.pusher.com https://www.google.com https://analytics.google.com https://stats.g.doubleclick.net https://analytics.tiktok.com; font-src 'self' https://fonts.gstatic.com https://cdn.userway.org; frame-src https://*.firebaseapp.com https://*.bka.sh https://*.google.com https://ced.robi.com.bd https://robi-video-chat.mevrik.net https://www.facebook.com https://www.youtube.com https://wms-web.robi.com.bd https://wms.robi.com.bd https://cdn.userway.org https://www.googletagmanager.com https://connect.facebook.net; worker-src 'self' blob:; form-action 'self' https://www.facebook.com; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; upgrade-insecure-requests; |
| Content-Type
| text/html; charset=utf-8 |
| Cross-Origin-Embedder-Policy
| unsafe-none |
| Cross-Origin-Opener-Policy
| unsafe-none |
| Cross-Origin-Resource-Policy
| cross-origin |
| Date
| Thu, 23 Jul 2026 10:43:54 GMT |
| Link
| ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="style", ; rel=preload; as="style", ; rel=preload; as="style", ; rel=preload; as="style", ; rel=preload; as="style", ; rel=preload; as="style", ; rel=preload; as="style" |
| Permissions-Policy
| camera=*, microphone=*, geolocation=*, fullscreen=() |
| Referrer-Policy
| same-origin |
| Strict-Transport-Security
| max-age=31536000; includeSubDomains |
| Vary
| rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding |
| X-Content-Type-Options
| nosniff |
| X-Middleware-Rewrite
| /en |
| X-Pathname
| /en |
| Transfer-Encoding
| chunked |
Meta Tags
| Viewport | width=device-width, initial-scale=1 |
| Description | My Robi App |
| Mobile-web-app-capable | yes |
| Apple-mobile-web-app-title | My Robi |
| Apple-mobile-web-app-status-bar-style | default |
Cache-Control private, no-cache, no-store, max-age=0, must-revalidate
Content-Encoding gzip
Content-Security-Policy default-src 'self'; script-src 'self' 'unsafe-inline' https://*.bka.sh https://*.google.com https://www.youtube.com https://cdn.userway.org https://www.googletagmanager.com https://analytics.tiktok.com https://connect.facebook.net https://livechat.myalice.ai; style-src 'self' 'unsafe-inline' https://*.bka.sh https://cdn.userway.org https://fonts.googleapis.com; img-src 'self' data: blob: https://*.bka.sh https://www.facebook.com https://s3-ap-southeast-1.amazonaws.com https://webapi.robi.com.bd https://webapi-preprod.robi.com.bd https://storage.googleapis.com https://cdn.userway.org https://connect.facebook.net https://www.google.com.bd https://myrobi-prod-static.robi.com.bd; connect-src 'self' https://*.bka.sh https://*.googleapis.com https://securetoken.googleapis.com https://payment.bkash.com https://sg-channels.mevrik.com https://webapi.robi.com.bd https://map.barikoi.com https://tiles.bmapsbd.com https://planet.tiles.bmapsbd.com https://api.userway.org https://robi-api.myalice.ai wss://ws-ap1.pusher.com https://sockjs-ap1.pusher.com https://www.google.com https://analytics.google.com https://stats.g.doubleclick.net https://analytics.tiktok.com; font-src 'self' https://fonts.gstatic.com https://cdn.userway.org; frame-src https://*.firebaseapp.com https://*.bka.sh https://*.google.com https://ced.robi.com.bd https://robi-video-chat.mevrik.net https://www.facebook.com https://www.youtube.com https://wms-web.robi.com.bd https://wms.robi.com.bd https://cdn.userway.org https://www.googletagmanager.com https://connect.facebook.net; worker-src 'self' blob:; form-action 'self' https://www.facebook.com; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; upgrade-insecure-requests;
Content-Type text/html; charset=utf-8
Cross-Origin-Embedder-Policy unsafe-none
Cross-Origin-Opener-Policy unsafe-none
Cross-Origin-Resource-Policy cross-origin
Date Thu, 23 Jul 2026 10:43:54 GMT
Link ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="font"; crossorigin=""; type="font/woff2", ; rel=preload; as="style", ; rel=preload; as="style", ; rel=preload; as="style", ; rel=preload; as="style", ; rel=preload; as="style", ; rel=preload; as="style", ; rel=preload; as="style"
Permissions-Policy camera=*, microphone=*, geolocation=*, fullscreen=()
Referrer-Policy same-origin
Strict-Transport-Security max-age=31536000; includeSubDomains
Vary rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding
X-Content-Type-Options nosniff
X-Middleware-Rewrite /en
X-Pathname /en
Transfer-Encoding chunked
