Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 150.171.109.100 |
| Compression | gzip |
|
🔒 🟡 Mixed Content (4 HTTP resources) | The page is served over HTTPS but loads 4 resource(s) over HTTP. This may be blocked in modern browsers. |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 150.171.109.100
Compression gzip
🔒 🟡 Mixed Content (4 HTTP resources) The page is served over HTTPS but loads 4 resource(s) over HTTP. This may be blocked in modern browsers.
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
Performance
| DNS Lookup | 40 ms |
| TCP Connect | 48.6 ms |
| TLS Handshake | 21.3 ms |
| Time To First Byte (TTFB) | 225.8 ms |
| Content Download | 9.4 ms |
| Total Response Time | 235.2 ms |
DNS Lookup 40 ms
TCP Connect 48.6 ms
TLS Handshake 21.3 ms
Time To First Byte (TTFB) 225.8 ms
Content Download 9.4 ms
Total Response Time 235.2 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000; includeSubDomains; preload |
| CSP | ⚠ Not configured |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000; includeSubDomains; preload
CSP ⚠ Not configured
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Boutique Hotels & Resorts | Small Luxury Hotels of the World | SLH |
| Meta Description | Book over 700 hotels in over 100 countries with Small Luxury Hotels of the World. Find your next luxury escape, nearby or far away. Join our club for exclusive rates. |
| Canonical | https://slh.com/ |
| Robots Meta | index, follow |
Title Boutique Hotels & Resorts | Small Luxury Hotels of the World | SLH
Meta Description Book over 700 hotels in over 100 countries with Small Luxury Hotels of the World. Find your next luxury escape, nearby or far away. Join our club for exclusive rates.
Canonical https://slh.com/
Robots Meta index, follow
Detected Technologies
| Technology | jQuery Google Analytics Google Tag Manager Hotjar |
Technology jQuery Google Analytics Google Tag Manager Hotjar
HTTP Headers
| Date
| Tue, 21 Jul 2026 00:16:36 GMT |
| Content-type
| text/html; charset=utf-8 |
| Content-length
| 20964 |
| Cache-control
| private |
| Content-encoding
| gzip |
| Set-cookie
| __RequestVerificationToken=mcyuVHAxMFjdrl-tLwJrskE2f_a-3WxxUAsmz2sSceIih1DHBr3EPXFjMDm96UL4V2Qv_AvKWrb_zci3Ip2zXSB-rA0NqJsMiIaxj1zk87g1; path=/; secure; HttpOnly; SameSite=None |
| Vary
| Accept-Encoding |
| Strict-transport-security
| max-age=31536000; includeSubDomains; preload |
| Content-security-policy-report-only
| default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.curator.io *.elfsight.com *.hotjar.com *.facebook.net *.cloudfront.net *.micpn.com *.searchstax.com *.wisepops.com wisepops.com *.wisepops.net wisepops.net *.sentry-cdn.com *.thehotelsnetwork.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.fonts.net *.myfonts.net *.doubleclick.net *.curator.io; img-src 'self' data: blob: *.google.co.uk *.facebook.com *.doubleclick.net *.google-analytics.com *.micpn.com *.googleapis.com *.gstatic.com *.cloudfront.net *.curator.io *.tripadvisor.com; connect-src 'self' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.micpn.com *.facebook.com *.mapbox.com *.curator.io *.wisepops.net *.wisepops.com wisepops.net wisepops.com *.thehotelsnetwork.com; font-src 'self' data: *.fonts.net *.myfonts.net *.gstatic.com; worker-src 'self' blob:; child-src 'self' blob: *.google.com *.googleapis.com *.googletagmanager.com *.doubleclick.net; frame-src 'self' *.google.com *.doubleclick.net *.facebook.com; media-src 'self'; object-src 'none'; base-uri 'self'; report-uri https://3chillies.report-uri.com/r/d/csp/reportOnly; |
| X-frame-options
| SAMEORIGIN |
| Request-context
| appId=cid-v1:0ae343ca-623c-4499-b925-d423e52cbb79 |
| Accept-ch
| Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness |
| X-content-type-options
| nosniff |
| Referrer-policy
| strict-origin-when-cross-origin |
| X-azure-ref
| 20260721T001636Z-17f55f9f4772f9mrhC1FRA6vfs0000000tx00000000033qs |
| X-cache
| CONFIG_NOCACHE |
| Accept-ranges
| bytes |
Meta Tags
| X-UA-Compatible | IE=edge |
| Description | Book over 700 hotels in over 100 countries with Small Luxury Hotels of the World. Find your next luxury escape, nearby or far away. Join our club for exclusive rates. |
| Robots | index, follow |
| Viewport | width=device-width, initial-scale=1 |
| Msapplication-TileColor | #ffffff |
| Msapplication-TileImage |  |
| Msapplication-config | /frontend/static/media/favicon/browserconfig.xml |
| Theme-color | #ffffff |
Date Tue, 21 Jul 2026 00:16:36 GMT
Content-type text/html; charset=utf-8
Content-length 20964
Cache-control private
Content-encoding gzip
Set-cookie __RequestVerificationToken=mcyuVHAxMFjdrl-tLwJrskE2f_a-3WxxUAsmz2sSceIih1DHBr3EPXFjMDm96UL4V2Qv_AvKWrb_zci3Ip2zXSB-rA0NqJsMiIaxj1zk87g1; path=/; secure; HttpOnly; SameSite=None
Vary Accept-Encoding
Strict-transport-security max-age=31536000; includeSubDomains; preload
Content-security-policy-report-only default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.curator.io *.elfsight.com *.hotjar.com *.facebook.net *.cloudfront.net *.micpn.com *.searchstax.com *.wisepops.com wisepops.com *.wisepops.net wisepops.net *.sentry-cdn.com *.thehotelsnetwork.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.fonts.net *.myfonts.net *.doubleclick.net *.curator.io; img-src 'self' data: blob: *.google.co.uk *.facebook.com *.doubleclick.net *.google-analytics.com *.micpn.com *.googleapis.com *.gstatic.com *.cloudfront.net *.curator.io *.tripadvisor.com; connect-src 'self' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.micpn.com *.facebook.com *.mapbox.com *.curator.io *.wisepops.net *.wisepops.com wisepops.net wisepops.com *.thehotelsnetwork.com; font-src 'self' data: *.fonts.net *.myfonts.net *.gstatic.com; worker-src 'self' blob:; child-src 'self' blob: *.google.com *.googleapis.com *.googletagmanager.com *.doubleclick.net; frame-src 'self' *.google.com *.doubleclick.net *.facebook.com; media-src 'self'; object-src 'none'; base-uri 'self'; report-uri https://3chillies.report-uri.com/r/d/csp/reportOnly;
X-frame-options SAMEORIGIN
Request-context appId=cid-v1:0ae343ca-623c-4499-b925-d423e52cbb79
Accept-ch Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Bitness
X-content-type-options nosniff
Referrer-policy strict-origin-when-cross-origin
X-azure-ref 20260721T001636Z-17f55f9f4772f9mrhC1FRA6vfs0000000tx00000000033qs
X-cache CONFIG_NOCACHE
Accept-ranges bytes
