Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 137.215.97.24 |
| Server Software | Apache |
|
ℹ 🔵 Missing HSTS | HTTP Strict Transport Security is not configured. Recommended for HTTPS sites. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
|
ℹ 🔵 No Compression | The server does not use Gzip or Brotli. Enable compression to reduce bandwidth usage. |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 137.215.97.24
Server Software Apache
ℹ 🔵 Missing HSTS HTTP Strict Transport Security is not configured. Recommended for HTTPS sites.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
ℹ 🔵 No Compression The server does not use Gzip or Brotli. Enable compression to reduce bandwidth usage.
Performance
| DNS Lookup | 202.6 ms |
| TCP Connect | 364.6 ms |
| TLS Handshake | 165.4 ms |
| Time To First Byte (TTFB) | 692.5 ms |
| Content Download | 0 ms |
| Total Response Time | 692.5 ms |
DNS Lookup 202.6 ms
TCP Connect 364.6 ms
TLS Handshake 165.4 ms
Time To First Byte (TTFB) 692.5 ms
Content Download 0 ms
Total Response Time 692.5 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✘ Not configured |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ⚠ Not configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✘ Not configured
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ⚠ Not configured
HTTP/2 ⚠ HTTP/1.1
Detected Technologies
| Technology | Google Tag Manager Cloudflare Apache |
Technology Google Tag Manager Cloudflare Apache
HTTP Headers
| Date
| Fri, 24 Jul 2026 22:30:13 GMT |
| Server
| Apache |
| Last-Modified
| Tue, 02 Dec 2025 09:28:34 GMT |
| ETag
| "4e-644f4b856460d:dtagent10341260622154106/Mox" |
| Accept-Ranges
| bytes |
| X-OneAgent-JS-Injection
| true |
| X-ruxit-JS-Agent
| true |
| Access-Control-Allow-Origin
| www1.up.ac.za |
| Content-Security-Policy
| frame-ancestors 'self' https://*.up.ac.za/ ; frame-src 'self' https://*.up.ac.za ; child-src 'self';script-src 'self' https://*.up.ac.za https://*.googleapis.com 'unsafe-inline' 'unsafe-eval' https://cdn.openitemapp.com/ https://fonts.gstatic.com https://fonts.gstatic.com https://www.googletagmanager.com/ https://connect.facebook.net/ https://scripts.clarity.ms/ https://www.clarity.ms/ https://snap.licdn.com/ https://googleads.g.doubleclick.net; base-uri 'self'; object-src 'self' ;connect-src 'self' wwwqa.up.ac.za https://www.google.com https://ad.doubleclick.net/ https://*.ads.linkedin.com/ https://*.on.aws/ https://*.run.app/ https://www.googleadservices.com https://analytics.google.com https://googleads.g.doubleclick.net https://*.clarity.ms/ https://www.google.co.za; font-src 'self' fonts.googleapis.com https://fonts.gstatic.com https://cdn.jsdelivr.net ; manifest-src 'self' https://cdn.openitemapp.com/Content/ https://cdnjs.cloudflare.com/ajax/; media-src 'self';worker-src 'self' ; upgrade-insecure-requests ; form-action 'self' https://*; |
| Server-Timing
| dtSInfo;desc="0", dtRpid;desc="183570313" |
| Content-Length
| 78 |
| Content-Type
| text/html; charset=UTF-8 |
Meta Tags
| Refresh | 0.01; URL=https://upnet.up.ac.za/portal |
Date Fri, 24 Jul 2026 22:30:13 GMT
Server Apache
Last-Modified Tue, 02 Dec 2025 09:28:34 GMT
ETag "4e-644f4b856460d:dtagent10341260622154106/Mox"
Accept-Ranges bytes
X-OneAgent-JS-Injection true
X-ruxit-JS-Agent true
Access-Control-Allow-Origin www1.up.ac.za
Content-Security-Policy frame-ancestors 'self' https://*.up.ac.za/ ; frame-src 'self' https://*.up.ac.za ; child-src 'self';script-src 'self' https://*.up.ac.za https://*.googleapis.com 'unsafe-inline' 'unsafe-eval' https://cdn.openitemapp.com/ https://fonts.gstatic.com https://fonts.gstatic.com https://www.googletagmanager.com/ https://connect.facebook.net/ https://scripts.clarity.ms/ https://www.clarity.ms/ https://snap.licdn.com/ https://googleads.g.doubleclick.net; base-uri 'self'; object-src 'self' ;connect-src 'self' wwwqa.up.ac.za https://www.google.com https://ad.doubleclick.net/ https://*.ads.linkedin.com/ https://*.on.aws/ https://*.run.app/ https://www.googleadservices.com https://analytics.google.com https://googleads.g.doubleclick.net https://*.clarity.ms/ https://www.google.co.za; font-src 'self' fonts.googleapis.com https://fonts.gstatic.com https://cdn.jsdelivr.net ; manifest-src 'self' https://cdn.openitemapp.com/Content/ https://cdnjs.cloudflare.com/ajax/; media-src 'self';worker-src 'self' ; upgrade-insecure-requests ; form-action 'self' https://*;
Server-Timing dtSInfo;desc="0", dtRpid;desc="183570313"
Content-Length 78
Content-Type text/html; charset=UTF-8
