Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 34.128.136.90 |
| Server Software | nginx |
| CDN | CDN (MISS) |
| Compression | gzip |
|
🔒 🟡 Mixed Content (1 HTTP resources) | The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers. |
|
🕐 🟡 Slow Response (1259 ms) | Response time exceeds 1 second. Consider optimizing the server or using caching. |
|
ℹ 🔵 Missing HSTS | HTTP Strict Transport Security is not configured. Recommended for HTTPS sites. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 34.128.136.90
Server Software nginx
CDN CDN (MISS)
Compression gzip
🔒 🟡 Mixed Content (1 HTTP resources) The page is served over HTTPS but loads 1 resource(s) over HTTP. This may be blocked in modern browsers.
🕐 🟡 Slow Response (1259 ms) Response time exceeds 1 second. Consider optimizing the server or using caching.
ℹ 🔵 Missing HSTS HTTP Strict Transport Security is not configured. Recommended for HTTPS sites.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://petaluma360.com:443 | 301 | HTTP/2 301 |
| 2 | https://www.petalumanews.com/ | 200 | HTTP/2 200 |
#1 URL https://petaluma360.com:443
HTTP Status Code 301
Status HTTP/2 301
#2 URL https://www.petalumanews.com/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 22.8 ms |
| TCP Connect | 23.8 ms |
| TLS Handshake | 7.5 ms |
| Time To First Byte (TTFB) | 1257.5 ms |
| Content Download | 1.2 ms |
| Total Response Time | 1258.7 ms |
DNS Lookup 22.8 ms
TCP Connect 23.8 ms
TLS Handshake 7.5 ms
Time To First Byte (TTFB) 1257.5 ms
Content Download 1.2 ms
Total Response Time 1258.7 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✘ Not configured |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ⚠ Not configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✘ Not configured
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ⚠ Not configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
Detected Technologies
| Technology | WordPress jQuery Google Analytics Google Tag Manager Nginx PHP Node.js |
Technology WordPress jQuery Google Analytics Google Tag Manager Nginx PHP Node.js
HTTP Headers
| Server
| nginx |
| Date
| Tue, 28 Jul 2026 16:37:11 GMT |
| Content-type
| text/html; charset=utf-8 |
| Content-security-policy
| default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: *.visualwebsiteoptimizer.com; style-src 'unsafe-inline' https: *.visualwebsiteoptimizer.com app.vwo.com; img-src data: https: blob: *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; font-src data: https:; connect-src https: data: blob: *.visualwebsiteoptimizer.com app.vwo.com; media-src blob: data: https:; object-src https:; child-src https: data: blob: 'self' *.visualwebsiteoptimizer.com app.vwo.com; upgrade-insecure-requests; block-all-mixed-content; |
| Link
| ; rel=shortlink |
| Content-encoding
| gzip |
| Accept-ranges
| bytes |
| Cache-control
| private |
| X-rq
| cdg1 0 40 9980 |
| X-cache
| MISS |
Meta Tags
| Application-name | petalumaargus-courier |
| Viewport | width=device-width, initial-scale=1 |
| Msvalidate.01 | 4B535F7EB2971D1FCBA5D1D3E3E292C3 |
| Robots | max-image-preview:large |
| Tdm-reservation | 1 |
| Generator | WordPress 6.9.5 |
| Msapplication-TileImage |  |
Server nginx
Date Tue, 28 Jul 2026 16:37:11 GMT
Content-type text/html; charset=utf-8
Content-security-policy default-src data: 'unsafe-inline' 'unsafe-eval' https:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: *.visualwebsiteoptimizer.com; style-src 'unsafe-inline' https: *.visualwebsiteoptimizer.com app.vwo.com; img-src data: https: blob: *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; font-src data: https:; connect-src https: data: blob: *.visualwebsiteoptimizer.com app.vwo.com; media-src blob: data: https:; object-src https:; child-src https: data: blob: 'self' *.visualwebsiteoptimizer.com app.vwo.com; upgrade-insecure-requests; block-all-mixed-content;
Link ; rel=shortlink
Content-encoding gzip
Accept-ranges bytes
Cache-control private
X-rq cdg1 0 40 9980
X-cache MISS
