Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 143.204.1.98 |
| Server Software | AmazonS3 |
| CDN | CDN (RefreshHit from cloudfront) |
| Compression | gzip |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 143.204.1.98
Server Software AmazonS3
CDN CDN (RefreshHit from cloudfront)
Compression gzip
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Performance
| DNS Lookup | 201.7 ms |
| TCP Connect | 339.5 ms |
| TLS Handshake | 143.2 ms |
| Time To First Byte (TTFB) | 706.8 ms |
| Content Download | 1 ms |
| Total Response Time | 707.8 ms |
DNS Lookup 201.7 ms
TCP Connect 339.5 ms
TLS Handshake 143.2 ms
Time To First Byte (TTFB) 706.8 ms
Content Download 1 ms
Total Response Time 707.8 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=86400 |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=86400
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | University of California | Office of The President |
Title University of California | Office of The President
Detected Technologies
| Technology | Bootstrap jQuery Google Analytics Google Tag Manager PHP |
Technology Bootstrap jQuery Google Analytics Google Tag Manager PHP
HTTP Headers
| Content-Type
| text/html; charset=utf-8 |
| Transfer-Encoding
| chunked |
| Connection
| keep-alive |
| Last-Modified
| Thu, 16 Jul 2026 16:46:42 GMT |
| Server
| AmazonS3 |
| X-amz-server-side-encryption
| AES256 |
| X-amz-version-id
| xFP9myerIvT4AeOYSXLjc7n0ugXcte5J |
| Content-Encoding
| gzip |
| Date
| Mon, 20 Jul 2026 23:15:45 GMT |
| ETag
| W/"6c25a1d3243f7d8ad3ecb060f2dd6b01" |
| Vary
| Accept-Encoding |
| X-Cache
| RefreshHit from cloudfront |
| Via
| 1.1 6daec11ce051cffaa3e440291c9bdce2.cloudfront.net (CloudFront) |
| X-Amz-Cf-Pop
| HIO52-P5 |
| X-Amz-Cf-Id
| IJAEDY3hmO4fMmSKV2fqDyxCUVkqp6idAwO1WlZJBwuZTZqVel07-A== |
| Content-Security-Policy
| frame-ancestors 'self';block-all-mixed-content;default-src 'self';script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' web-cdn.ucop.edu ajax.googleapis.com cse.google.com google-analytics.com googletagmanager.com maxcdn.bootstrapcdn.com m.youtube.com netdna.bootstrapcdn.com stackpath.bootstrapcdn.com ssl.google-analytics.com tagmanager.google.com www.google-analytics.com www.google.com www.googletagmanager.com www.youtube.com *.spectate.com s3.amazonaws.com;style-src 'self' 'report-sample' 'unsafe-inline' web-cdn.ucop.edu *.google.com *.bootstrapcdn.com ajax.googleapis.com www.googletagmanager.com cdn-images.mailchimp.com *.mailchimp.com;object-src 'none';frame-src 'self' *.youtube.com syndicatedsearch.goog www.googletagmanager.com www.youtube-nocookie.com *.spectate.com;child-src 'self' www.googletagmanager.com www.youtube.com;img-src 'self' data: blob: *.ytimg.com *.youtube.com *.google.com *.google-analytics.com ajax.googleapis.com www.googletagmanager.com *.ucop.edu ucop.edu;font-src 'self' data: *.bootstrapcdn.com;connect-src 'self' *.google.com ajax.googleapis.com stats.g.doubleclick.net www.google-analytics.com www.googletagmanager.com *.amazonaws.com; |
| X-Content-Type-Options
| nosniff |
| Strict-Transport-Security
| max-age=86400 |
Meta Tags
| Id | 93ea8d8f80306553768e7b8405430ef1 |
Content-Type text/html; charset=utf-8
Transfer-Encoding chunked
Connection keep-alive
Last-Modified Thu, 16 Jul 2026 16:46:42 GMT
Server AmazonS3
X-amz-server-side-encryption AES256
X-amz-version-id xFP9myerIvT4AeOYSXLjc7n0ugXcte5J
Content-Encoding gzip
Date Mon, 20 Jul 2026 23:15:45 GMT
ETag W/"6c25a1d3243f7d8ad3ecb060f2dd6b01"
Vary Accept-Encoding
X-Cache RefreshHit from cloudfront
Via 1.1 6daec11ce051cffaa3e440291c9bdce2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop HIO52-P5
X-Amz-Cf-Id IJAEDY3hmO4fMmSKV2fqDyxCUVkqp6idAwO1WlZJBwuZTZqVel07-A==
Content-Security-Policy frame-ancestors 'self';block-all-mixed-content;default-src 'self';script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' web-cdn.ucop.edu ajax.googleapis.com cse.google.com google-analytics.com googletagmanager.com maxcdn.bootstrapcdn.com m.youtube.com netdna.bootstrapcdn.com stackpath.bootstrapcdn.com ssl.google-analytics.com tagmanager.google.com www.google-analytics.com www.google.com www.googletagmanager.com www.youtube.com *.spectate.com s3.amazonaws.com;style-src 'self' 'report-sample' 'unsafe-inline' web-cdn.ucop.edu *.google.com *.bootstrapcdn.com ajax.googleapis.com www.googletagmanager.com cdn-images.mailchimp.com *.mailchimp.com;object-src 'none';frame-src 'self' *.youtube.com syndicatedsearch.goog www.googletagmanager.com www.youtube-nocookie.com *.spectate.com;child-src 'self' www.googletagmanager.com www.youtube.com;img-src 'self' data: blob: *.ytimg.com *.youtube.com *.google.com *.google-analytics.com ajax.googleapis.com www.googletagmanager.com *.ucop.edu ucop.edu;font-src 'self' data: *.bootstrapcdn.com;connect-src 'self' *.google.com ajax.googleapis.com stats.g.doubleclick.net www.google-analytics.com www.googletagmanager.com *.amazonaws.com;
X-Content-Type-Options nosniff
Strict-Transport-Security max-age=86400
