Technical Information
| HTTP Status Code | 403 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 76.76.21.21 |
| Server Software | Vercel |
| CDN | Vercel |
| Compression | gzip |
|
🚫 🟡 HTTP 403 Error | The server returned a 403 error. Check the access configuration. |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 403
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 76.76.21.21
Server Software Vercel
CDN Vercel
Compression gzip
🚫 🟡 HTTP 403 Error The server returned a 403 error. Check the access configuration.
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://thebody.com:443 | 308 | HTTP/2 308 |
| 2 | https://www.thebody.com/ | 403 | HTTP/2 403 |
#1 URL https://thebody.com:443
HTTP Status Code 308
Status HTTP/2 308
#2 URL https://www.thebody.com/
HTTP Status Code 403
Status HTTP/2 403
Performance
| DNS Lookup | 5.2 ms |
| TCP Connect | 5.9 ms |
| TLS Handshake | 6.3 ms |
| Time To First Byte (TTFB) | 74.6 ms |
| Content Download | 0.1 ms |
| Total Response Time | 74.6 ms |
DNS Lookup 5.2 ms
TCP Connect 5.9 ms
TLS Handshake 6.3 ms
Time To First Byte (TTFB) 74.6 ms
Content Download 0.1 ms
Total Response Time 74.6 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=63072000 |
| CSP | ⚠ Not configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ⚠ Not configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=63072000
CSP ⚠ Not configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ⚠ Not configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
Title thebody.com
HTTP Headers
| Accept-ch | Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory |
| Access-control-allow-credentials | true |
| Access-control-allow-origin | * |
| Access-control-expose-headers | x-dd-b, x-set-cookie |
| Cache-control | max-age=0, private, no-cache, no-store, must-revalidate |
| Charset | utf-8 |
| Content-encoding | gzip |
| Content-type | text/html;charset=utf-8 |
| Date | Fri, 24 Jul 2026 14:53:33 GMT |
| Pragma | no-cache |
| Server | Vercel |
| Set-cookie | datadome=BTezNGaaZfE4o4LbDiBz53mlF6FyuFUNMpiT6CvnvOXMOZ87epYXrnQEIGc99CAF5lYCcoTDpAjvj5PVXsOrISNScFDOcjoCI9k8ekYzlKMU4VlOdHs3Jj_XYpCwGAeS; Max-Age=31536000; Domain=.thebody.com; Path=/; Secure; SameSite=Lax |
| Strict-transport-security | max-age=63072000 |
| X-datadome | protected |
| X-datadome-cid | AHrlqAAAAAMAhQ8fb2g5EacANC_MAg== |
| X-dd-b | 1 |
| X-vercel-id | cdg1::88l5w-1784904813690-959ec58ccc8f |
Accept-ch Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Access-control-allow-credentials true
Access-control-allow-origin *
Access-control-expose-headers x-dd-b, x-set-cookie
Cache-control max-age=0, private, no-cache, no-store, must-revalidate
Charset utf-8
Content-encoding gzip
Content-type text/html;charset=utf-8
Date Fri, 24 Jul 2026 14:53:33 GMT
Pragma no-cache
Server Vercel
Set-cookie datadome=BTezNGaaZfE4o4LbDiBz53mlF6FyuFUNMpiT6CvnvOXMOZ87epYXrnQEIGc99CAF5lYCcoTDpAjvj5PVXsOrISNScFDOcjoCI9k8ekYzlKMU4VlOdHs3Jj_XYpCwGAeS; Max-Age=31536000; Domain=.thebody.com; Path=/; Secure; SameSite=Lax
Strict-transport-security max-age=63072000
X-datadome protected
X-datadome-cid AHrlqAAAAAMAhQ8fb2g5EacANC_MAg==
X-dd-b 1
X-vercel-id cdg1::88l5w-1784904813690-959ec58ccc8f