Información Técnica
| Código de estado HTTP | 403 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 172.64.153.202 |
| Software del servidor | cloudflare |
| CDN | Cloudflare |
| Compresión | gzip |
|
🚫 🟡 HTTP 403 Error | El servidor devolvió un error 403. Revisa la configuración de acceso. |
Código de estado HTTP 403
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 172.64.153.202
Software del servidor cloudflare
CDN Cloudflare
Compresión gzip
🚫 🟡 HTTP 403 Error El servidor devolvió un error 403. Revisa la configuración de acceso.
Cadena de Redirecciones
| # | URL | Código de estado HTTP | Estado |
| 1 | https://searspartsdirect.com:443 | 301 | HTTP/2 301 |
| 2 | https://www.searspartsdirect.com/ | 403 | HTTP/2 403 |
#1 URL https://searspartsdirect.com:443
Código de estado HTTP 301
Estado HTTP/2 301
#2 URL https://www.searspartsdirect.com/
Código de estado HTTP 403
Estado HTTP/2 403
Rendimiento
| Resolución DNS | 39 ms |
| Conexión TCP | 41 ms |
| Negociación TLS | 6.9 ms |
| Tiempo hasta el primer byte (TTFB) | 55.1 ms |
| Descarga de contenido | 0.1 ms |
| Tiempo total de respuesta | 55.2 ms |
Resolución DNS 39 ms
Conexión TCP 41 ms
Negociación TLS 6.9 ms
Tiempo hasta el primer byte (TTFB) 55.1 ms
Descarga de contenido 0.1 ms
Tiempo total de respuesta 55.2 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=63072000; includeSubdomains; preload |
| CSP | ✔ Configurado |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| Política de Referrer | same-origin |
| Política de Permisos | ✔ Configurado |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=63072000; includeSubdomains; preload
CSP ✔ Configurado
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
Política de Referrer same-origin
Política de Permisos ✔ Configurado
HTTP/2 ⚠ HTTP/1.1
Comprobación SEO
| Título | Just a moment... |
| Robots Meta | noindex,nofollow |
Título Just a moment...
Robots Meta noindex,nofollow
Tecnologías Detectadas
| Tecnología | Google Analytics Google Tag Manager Cloudflare Stripe |
Tecnología Google Analytics Google Tag Manager Cloudflare Stripe
Cabeceras HTTP
| Date | Fri, 24 Jul 2026 12:55:52 GMT |
| Content-type | text/html; charset=UTF-8 |
| Accept-ch | Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA |
| Cf-mitigated | challenge |
| Content-security-policy | default-src 'none'; script-src 'nonce-KIn5WvPH5XlAfBb6Io9y6D' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self' |
| Server | cloudflare |
| Critical-ch | Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA |
| Cross-origin-embedder-policy | require-corp |
| Cross-origin-opener-policy | same-origin |
| Cross-origin-resource-policy | same-origin |
| Origin-agent-cluster | ?1 |
| Permissions-policy | accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=* |
| Referrer-policy | same-origin |
| Server-timing | chlray;desc="a20314e8598daf97" |
| X-content-type-options | nosniff |
| X-frame-options | SAMEORIGIN |
| Vary | accept-encoding |
| Set-cookie | __cf_bm=ScH5U.dC3s69ZMjyoaWxiYXfSAKcb30mAaMCGW8VbYE-1784897752.3714597-1.0.1.1-xKL.aeifJ.BHHrLHERyLjRmAmtsd9xJvxK0TyUUg..Vv4qE2BpzofrLVItrYSvoWdQH1.4cGnC7pfgQtcpAqZeg_vVYmHOeocxyiIXJsEbFBV5dEcNnrvLQCM_SysMMt; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.searspartsdirect.com; Expires=Fri, 24 Jul 2026 13:25:52 GMT |
| Expect-ct | max-age=86400, enforce |
| X-xss-protection | 1; mode=block |
| Content-security-policy-report-only | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net js.stripe.com *.criteo.com *.simonsignal.com www.facebook.com connect.facebook.net bat.bing.com *.clarity.ms *.vibe.co www.google-analytics.com cdn.cookielaw.org *.optimizely.com cdnjs.cloudflare.com cdn.debugbear.com googleads.g.doubleclick.net d229tanlyij0i7.cloudfront.net d3cv1fywnihry0.cloudfront.net a61aa9fd029d.cdn4.forter.com js-agent.newrelic.com ui.powerreviews.com payment.searshomeservices.com tags.fullcontact.com www.googletagmanager.com www.paypal.com cdn.id5-sync.com mpsnare.iesnare.com d-code.liadm.com 8quntm5h1h.execute-api.us-east-1.amazonaws.com; frame-src 'self' js.stripe.com payment.searshomeservices.com offers.searshomeservices.com www.googletagmanager.com i.liadm.com gum.criteo.com gumi.criteo.com www.paypal.com c.searspartsdirect.com www.facebook.com connect.facebook.net a25563730275.cdn.optimizely.com; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; worker-src * data: blob: 'unsafe-inline'; base-uri 'self'; form-action 'self' www.facebook.com; frame-ancestors 'self'; report-to report-endpoint; |
| Reporting-endpoints | report-endpoint="https://api.searspartsdirect.com/report-uri" |
| Strict-transport-security | max-age=63072000; includeSubdomains; preload |
| X-bot-score | 1 |
| X-verified-bot | false |
| Content-encoding | gzip |
| Cf-ray | a20314e8598daf97-CDG |
| Alt-svc | h3=":443"; ma=86400 |
Meta Tags
| Content-Type | text/html; charset=UTF-8 |
| X-UA-Compatible | IE=Edge |
| Robots | noindex,nofollow |
| Viewport | width=device-width,initial-scale=1 |
| Content-security-policy | default-src 'none'; script-src 'nonce-KIn5WvPH5XlAfBb6Io9y6D' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self' |
| Refresh | 360 |
Date Fri, 24 Jul 2026 12:55:52 GMT
Content-type text/html; charset=UTF-8
Accept-ch Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cf-mitigated challenge
Content-security-policy default-src 'none'; script-src 'nonce-KIn5WvPH5XlAfBb6Io9y6D' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'
Server cloudflare
Critical-ch Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-origin-embedder-policy require-corp
Cross-origin-opener-policy same-origin
Cross-origin-resource-policy same-origin
Origin-agent-cluster ?1
Permissions-policy accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*
Referrer-policy same-origin
Server-timing chlray;desc="a20314e8598daf97"
X-content-type-options nosniff
X-frame-options SAMEORIGIN
Vary accept-encoding
Set-cookie __cf_bm=ScH5U.dC3s69ZMjyoaWxiYXfSAKcb30mAaMCGW8VbYE-1784897752.3714597-1.0.1.1-xKL.aeifJ.BHHrLHERyLjRmAmtsd9xJvxK0TyUUg..Vv4qE2BpzofrLVItrYSvoWdQH1.4cGnC7pfgQtcpAqZeg_vVYmHOeocxyiIXJsEbFBV5dEcNnrvLQCM_SysMMt; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.searspartsdirect.com; Expires=Fri, 24 Jul 2026 13:25:52 GMT
Expect-ct max-age=86400, enforce
X-xss-protection 1; mode=block
Content-security-policy-report-only default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net js.stripe.com *.criteo.com *.simonsignal.com www.facebook.com connect.facebook.net bat.bing.com *.clarity.ms *.vibe.co www.google-analytics.com cdn.cookielaw.org *.optimizely.com cdnjs.cloudflare.com cdn.debugbear.com googleads.g.doubleclick.net d229tanlyij0i7.cloudfront.net d3cv1fywnihry0.cloudfront.net a61aa9fd029d.cdn4.forter.com js-agent.newrelic.com ui.powerreviews.com payment.searshomeservices.com tags.fullcontact.com www.googletagmanager.com www.paypal.com cdn.id5-sync.com mpsnare.iesnare.com d-code.liadm.com 8quntm5h1h.execute-api.us-east-1.amazonaws.com; frame-src 'self' js.stripe.com payment.searshomeservices.com offers.searshomeservices.com www.googletagmanager.com i.liadm.com gum.criteo.com gumi.criteo.com www.paypal.com c.searspartsdirect.com www.facebook.com connect.facebook.net a25563730275.cdn.optimizely.com; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; worker-src * data: blob: 'unsafe-inline'; base-uri 'self'; form-action 'self' www.facebook.com; frame-ancestors 'self'; report-to report-endpoint;
Reporting-endpoints report-endpoint="https://api.searspartsdirect.com/report-uri"
Strict-transport-security max-age=63072000; includeSubdomains; preload
X-bot-score 1
X-verified-bot false
Content-encoding gzip
Cf-ray a20314e8598daf97-CDG
Alt-svc h3=":443"; ma=86400
