Technical Information
| HTTP Status Code | 403 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 99.83.188.150 |
| Server Software | DataDome |
| CDN | CDN (MISS) |
|
🚫 🟡 HTTP 403 Error | The server returned a 403 error. Check the access configuration. |
|
ℹ 🔵 Missing HSTS | HTTP Strict Transport Security is not configured. Recommended for HTTPS sites. |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 403
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 99.83.188.150
Server Software DataDome
CDN CDN (MISS)
🚫 🟡 HTTP 403 Error The server returned a 403 error. Check the access configuration.
ℹ 🔵 Missing HSTS HTTP Strict Transport Security is not configured. Recommended for HTTPS sites.
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://vitaminshoppe.com:443 | 301 | HTTP/2 301 |
| 2 | https://www.vitaminshoppe.com | 403 | HTTP/2 403 |
#1 URL https://vitaminshoppe.com:443
HTTP Status Code 301
Status HTTP/2 301
#2 URL https://www.vitaminshoppe.com
HTTP Status Code 403
Status HTTP/2 403
Performance
| DNS Lookup | 17.8 ms |
| TCP Connect | 18.6 ms |
| TLS Handshake | 8.9 ms |
| Time To First Byte (TTFB) | 45 ms |
| Content Download | 0 ms |
| Total Response Time | 45 ms |
DNS Lookup 17.8 ms
TCP Connect 18.6 ms
TLS Handshake 8.9 ms
Time To First Byte (TTFB) 45 ms
Content Download 0 ms
Total Response Time 45 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✘ Not configured |
| CSP | ⚠ Not configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ⚠ Not configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✘ Not configured
CSP ⚠ Not configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ⚠ Not configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
Title vitaminshoppe.com
HTTP Headers
| Content-type | text/html;charset=utf-8 |
| Server | DataDome |
| X-datadome | protected |
| Accept-ch | Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory |
| Charset | utf-8 |
| Pragma | no-cache |
| Access-control-allow-credentials | true |
| Access-control-expose-headers | x-dd-b, x-set-cookie |
| X-datadome-cid | AHrlqAAAAAMACZkrcv4u8hIANC_MAg== |
| X-dd-b | 2 |
| Set-cookie | datadome=kscB~fnCEXZ8dvG9grV8tp2ZU2b3xxDUKR9YIBekPidLHjpQLNSQsNR3JUfDLdn38mixqfWO4QG3BxAghrtQySG09iS4BjyHlNkzwiqYhOjmsy7HzhGu~~iHTxVEgg~D; Max-Age=31536000; Domain=.vitaminshoppe.com; Path=/; Secure; SameSite=Lax |
| Cache-control | max-age=0, no-cache, no-store, must-revalidate |
| Accept-ranges | bytes |
| Date | Fri, 24 Jul 2026 16:08:08 GMT |
| Via | 1.1 varnish |
| X-served-by | cache-par-lfpg1960077-PAR |
| X-cache | MISS |
| X-cache-hits | 0 |
| X-timer | S1784909288.305696,VS0,VE16 |
| X-location | FR|52.47.204.2|75001|IDF |
| X-backend | F_AWS_S3_Backend |
| Access-control-allow-origin | * |
| Vary | Accept-Encoding |
| Content-length | 777 |
Content-type text/html;charset=utf-8
Server DataDome
X-datadome protected
Accept-ch Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
Charset utf-8
Pragma no-cache
Access-control-allow-credentials true
Access-control-expose-headers x-dd-b, x-set-cookie
X-datadome-cid AHrlqAAAAAMACZkrcv4u8hIANC_MAg==
X-dd-b 2
Set-cookie datadome=kscB~fnCEXZ8dvG9grV8tp2ZU2b3xxDUKR9YIBekPidLHjpQLNSQsNR3JUfDLdn38mixqfWO4QG3BxAghrtQySG09iS4BjyHlNkzwiqYhOjmsy7HzhGu~~iHTxVEgg~D; Max-Age=31536000; Domain=.vitaminshoppe.com; Path=/; Secure; SameSite=Lax
Cache-control max-age=0, no-cache, no-store, must-revalidate
Accept-ranges bytes
Date Fri, 24 Jul 2026 16:08:08 GMT
Via 1.1 varnish
X-served-by cache-par-lfpg1960077-PAR
X-cache MISS
X-cache-hits 0
X-timer S1784909288.305696,VS0,VE16
X-location FR|52.47.204.2|75001|IDF
X-backend F_AWS_S3_Backend
Access-control-allow-origin *
Vary Accept-Encoding
Content-length 777
