Información Técnica
| Código de estado HTTP | 200 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 54.169.121.110 |
| Compresión | gzip |
|
ℹ 🔵 Falta X-Frame-Options | El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking). |
Código de estado HTTP 200
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 54.169.121.110
Compresión gzip
ℹ 🔵 Falta X-Frame-Options El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking).
Rendimiento
| Resolución DNS | 4.1 ms |
| Conexión TCP | 171.8 ms |
| Negociación TLS | 338.6 ms |
| Tiempo hasta el primer byte (TTFB) | 894.6 ms |
| Descarga de contenido | 0.8 ms |
| Tiempo total de respuesta | 895.4 ms |
Resolución DNS 4.1 ms
Conexión TCP 171.8 ms
Negociación TLS 338.6 ms
Tiempo hasta el primer byte (TTFB) 894.6 ms
Descarga de contenido 0.8 ms
Tiempo total de respuesta 895.4 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=63072000; includeSubDomains; preload |
| CSP | ✔ Configurado |
| X-Frame-Options | ⚠ No configurado |
| X-Content-Type-Options | ✔ nosniff |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=63072000; includeSubDomains; preload
CSP ✔ Configurado
X-Frame-Options ⚠ No configurado
X-Content-Type-Options ✔ nosniff
HTTP/2 ⚠ HTTP/1.1
Comprobación SEO
Título Traveloka - TERA
Tecnologías Detectadas
| Tecnología | React Google Analytics Cloudflare Next.js |
Tecnología React Google Analytics Cloudflare Next.js
Cabeceras HTTP
| Date
| Fri, 24 Jul 2026 20:17:59 GMT |
| Content-type
| text/html; charset=utf-8 |
| Content-security-policy
| default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://*.awswaf.com https://*.cloudflare.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.jsdelivr.net http://unpkg.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com; img-src 'self' blob: data: https://*.cloudfront.net https://*.amazonaws.com https://*.cloudfront.net-dev https://*.googleapis.com https://*.gstatic.com https://*.imagekit.io; connect-src 'self' https://*.staging-traveloka.com https://*.traveloka.com https://*.tvlk-data.com https://*.amazonaws.com https://*.awswaf.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com https://*.cloudfront.net https://*.googleapis.com; font-src 'self' blob: data: https://*.googleapis.com https://*.gstatic.com; media-src 'self' blob: https://*.cloudfront.net; frame-src 'self' https://*.google.com; object-src data:; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests |
| Strict-transport-security
| max-age=63072000; includeSubDomains; preload |
| X-content-type-options
| nosniff |
| X-powered-by
| Next.js |
| Cache-control
| private, no-cache, no-store, max-age=0, must-revalidate |
| Etag
| "lcw27ism382m7m" |
| Vary
| Accept-Encoding |
| Content-encoding
| gzip |
Meta Tags
| Viewport | width=device-width, initial-scale=1.0 |
| Next-head-count | 3 |
Date Fri, 24 Jul 2026 20:17:59 GMT
Content-type text/html; charset=utf-8
Content-security-policy default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://*.awswaf.com https://*.cloudflare.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.jsdelivr.net http://unpkg.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com; img-src 'self' blob: data: https://*.cloudfront.net https://*.amazonaws.com https://*.cloudfront.net-dev https://*.googleapis.com https://*.gstatic.com https://*.imagekit.io; connect-src 'self' https://*.staging-traveloka.com https://*.traveloka.com https://*.tvlk-data.com https://*.amazonaws.com https://*.awswaf.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com https://*.cloudfront.net https://*.googleapis.com; font-src 'self' blob: data: https://*.googleapis.com https://*.gstatic.com; media-src 'self' blob: https://*.cloudfront.net; frame-src 'self' https://*.google.com; object-src data:; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests
Strict-transport-security max-age=63072000; includeSubDomains; preload
X-content-type-options nosniff
X-powered-by Next.js
Cache-control private, no-cache, no-store, max-age=0, must-revalidate
Etag "lcw27ism382m7m"
Vary Accept-Encoding
Content-encoding gzip
