Información Técnica
| Código de estado HTTP | 403 |
| Versión HTTP | HTTP/1.1 |
| HTTPS | ✔ Disponible |
| Dirección IP | 151.101.194.98 |
| Software del servidor | DataDome |
| CDN | CDN (MISS) |
|
🚫 🟡 HTTP 403 Error | El servidor devolvió un error 403. Revisa la configuración de acceso. |
|
ℹ 🔵 Falta Content Security Policy | No se ha configurado CSP. Ayuda a prevenir ataques XSS e inyección de contenido. |
|
ℹ 🔵 Falta X-Frame-Options | El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking). |
Código de estado HTTP 403
Versión HTTP HTTP/1.1
HTTPS ✔ Disponible
Dirección IP 151.101.194.98
Software del servidor DataDome
CDN CDN (MISS)
🚫 🟡 HTTP 403 Error El servidor devolvió un error 403. Revisa la configuración de acceso.
ℹ 🔵 Falta Content Security Policy No se ha configurado CSP. Ayuda a prevenir ataques XSS e inyección de contenido.
ℹ 🔵 Falta X-Frame-Options El sitio puede ser incrustado en iframes por terceros (riesgo de clickjacking).
Rendimiento
| Resolución DNS | 13.6 ms |
| Conexión TCP | 14.7 ms |
| Negociación TLS | 6.4 ms |
| Tiempo hasta el primer byte (TTFB) | 38.2 ms |
| Descarga de contenido | 0 ms |
| Tiempo total de respuesta | 38.2 ms |
Resolución DNS 13.6 ms
Conexión TCP 14.7 ms
Negociación TLS 6.4 ms
Tiempo hasta el primer byte (TTFB) 38.2 ms
Descarga de contenido 0 ms
Tiempo total de respuesta 38.2 ms
Seguridad
| HTTPS | ✔ Activado |
| HSTS | ✔ max-age=31557600 |
| CSP | ⚠ No configurado |
| X-Frame-Options | ⚠ No configurado |
| X-Content-Type-Options | ⚠ No configurado |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Activado
HSTS ✔ max-age=31557600
CSP ⚠ No configurado
X-Frame-Options ⚠ No configurado
X-Content-Type-Options ⚠ No configurado
HTTP/2 ⚠ HTTP/1.1
Comprobación SEO
Título thespun.com
Tecnologías Detectadas
| Tecnología | Google Analytics |
Tecnología Google Analytics
Cabeceras HTTP
| Content-type | text/html;charset=utf-8 |
| Server | DataDome |
| X-datadome | protected |
| Accept-ch | Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory |
| X-datadome-devicecheckpassed | NA |
| X-datadome-traffic-rule-response | block |
| Charset | utf-8 |
| Cache-control | max-age=0, private, no-cache, no-store, must-revalidate |
| Pragma | no-cache |
| Access-control-allow-credentials | true |
| Access-control-expose-headers | x-dd-b, x-set-cookie |
| Access-control-allow-origin | * |
| X-datadome-cid | AHrlqAAAAAMA_pCsk8zUQAEANC_MAg== |
| X-dd-b | 1 |
| Set-cookie | datadome=PqHvj8SMZSzJ~KmfKaI367ywEfyhMO6do2TAmM3rBcWSGJGT3Usu_kLBOc76ejC57Qu_BlEAmyzpvoOfhBoArJykTlLNYJPZoOy57FOdfXZnco7pceoHJW0ryKrEwdVS; Max-Age=31536000; Domain=.thespun.com; Path=/; Secure; SameSite=Lax |
| X-datadome-cookie | datadome=PqHvj8SMZSzJ~KmfKaI367ywEfyhMO6do2TAmM3rBcWSGJGT3Usu_kLBOc76ejC57Qu_BlEAmyzpvoOfhBoArJykTlLNYJPZoOy57FOdfXZnco7pceoHJW0ryKrEwdVS; Max-Age=31536000; Domain=.thespun.com; Path=/; Secure; SameSite=Lax |
| X-saycdn-ttl | 0.000 |
| Accept-ranges | bytes |
| Date | Thu, 23 Jul 2026 10:03:28 GMT |
| Via | 1.1 varnish |
| X-served-by | cache-par-lfpb1150025-PAR |
| X-cache | MISS |
| X-cache-hits | 0 |
| X-timer | S1784801008.191159,VS0,VE15 |
| Strict-transport-security | max-age=31557600 |
| Reporting-endpoints | crash-reporting="https://thespun.com/.api/crash-reports" |
| Document-policy | include-js-call-stacks-in-crash-reports |
| Server-timing | time-start-msec;dur=1784801008191,time-elapsed;dur=15,fastly-pop;desc=PAR,hit-state;desc=PASS |
| Content-length | 771 |
Content-type text/html;charset=utf-8
Server DataDome
X-datadome protected
Accept-ch Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
X-datadome-devicecheckpassed NA
X-datadome-traffic-rule-response block
Charset utf-8
Cache-control max-age=0, private, no-cache, no-store, must-revalidate
Pragma no-cache
Access-control-allow-credentials true
Access-control-expose-headers x-dd-b, x-set-cookie
Access-control-allow-origin *
X-datadome-cid AHrlqAAAAAMA_pCsk8zUQAEANC_MAg==
X-dd-b 1
Set-cookie datadome=PqHvj8SMZSzJ~KmfKaI367ywEfyhMO6do2TAmM3rBcWSGJGT3Usu_kLBOc76ejC57Qu_BlEAmyzpvoOfhBoArJykTlLNYJPZoOy57FOdfXZnco7pceoHJW0ryKrEwdVS; Max-Age=31536000; Domain=.thespun.com; Path=/; Secure; SameSite=Lax
X-datadome-cookie datadome=PqHvj8SMZSzJ~KmfKaI367ywEfyhMO6do2TAmM3rBcWSGJGT3Usu_kLBOc76ejC57Qu_BlEAmyzpvoOfhBoArJykTlLNYJPZoOy57FOdfXZnco7pceoHJW0ryKrEwdVS; Max-Age=31536000; Domain=.thespun.com; Path=/; Secure; SameSite=Lax
X-saycdn-ttl 0.000
Accept-ranges bytes
Date Thu, 23 Jul 2026 10:03:28 GMT
Via 1.1 varnish
X-served-by cache-par-lfpb1150025-PAR
X-cache MISS
X-cache-hits 0
X-timer S1784801008.191159,VS0,VE15
Strict-transport-security max-age=31557600
Reporting-endpoints crash-reporting="https://thespun.com/.api/crash-reports"
Document-policy include-js-call-stacks-in-crash-reports
Server-timing time-start-msec;dur=1784801008191,time-elapsed;dur=15,fastly-pop;desc=PAR,hit-state;desc=PASS
Content-length 771
