Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 95.215.19.22 |
| Server Software | nginx |
|
ℹ 🔵 Missing HSTS | HTTP Strict Transport Security is not configured. Recommended for HTTPS sites. |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
|
ℹ 🔵 No Compression | The server does not use Gzip or Brotli. Enable compression to reduce bandwidth usage. |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 95.215.19.22
Server Software nginx
ℹ 🔵 Missing HSTS HTTP Strict Transport Security is not configured. Recommended for HTTPS sites.
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵 No Compression The server does not use Gzip or Brotli. Enable compression to reduce bandwidth usage.
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://play.xplist.vip:443 | 302 | HTTP/2 302 |
| 2 | http://auth.xplist.vip | 200 | HTTP/1.1 200 OK |
#1 URL https://play.xplist.vip:443
HTTP Status Code 302
Status HTTP/2 302
#2 URL http://auth.xplist.vip
HTTP Status Code 200
Status HTTP/1.1 200 OK
Performance
| DNS Lookup | 21.7 ms |
| TCP Connect | 130.3 ms |
| TLS Handshake | ~80 ms |
| Time To First Byte (TTFB) | 244.5 ms |
| Content Download | 0 ms |
| Total Response Time | 244.5 ms |
DNS Lookup 21.7 ms
TCP Connect 130.3 ms
TLS Handshake ~80 ms
Time To First Byte (TTFB) 244.5 ms
Content Download 0 ms
Total Response Time 244.5 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✘ Not configured |
| CSP | ⚠ Not configured |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | no-referrer |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✘ Not configured
CSP ⚠ Not configured
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
Referrer Policy no-referrer
HTTP/2 ⚠ HTTP/1.1
Detected Technologies
Technology Nginx
HTTP Headers
| Server
| nginx |
| Date
| Mon, 27 Jul 2026 21:24:21 GMT |
| Content-Type
| text/html; charset=utf-8 |
| Content-Length
| 84 |
| Connection
| keep-alive |
| Cross-Origin-Resource-Policy
| cross-origin |
| Referrer-Policy
| no-referrer |
| X-Content-Type-Options
| nosniff |
| X-DNS-Prefetch-Control
| off |
| X-Download-Options
| noopen |
| X-Frame-Options
| SAMEORIGIN |
| X-Permitted-Cross-Domain-Policies
| none |
| X-XSS-Protection
| 0 |
| Access-Control-Allow-Origin
| * |
| ETag
| W/"54-Or3OCWUc04oLvNq9Hp0GoqjS8EA" |
| Vary
| Accept-Encoding |
Server nginx
Date Mon, 27 Jul 2026 21:24:21 GMT
Content-Type text/html; charset=utf-8
Content-Length 84
Connection keep-alive
Cross-Origin-Resource-Policy cross-origin
Referrer-Policy no-referrer
X-Content-Type-Options nosniff
X-DNS-Prefetch-Control off
X-Download-Options noopen
X-Frame-Options SAMEORIGIN
X-Permitted-Cross-Domain-Policies none
X-XSS-Protection 0
Access-Control-Allow-Origin *
ETag W/"54-Or3OCWUc04oLvNq9Hp0GoqjS8EA"
Vary Accept-Encoding
