Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 138.197.62.195 |
| Compression | gzip |
|
ℹ 🔵 Missing HSTS | HTTP Strict Transport Security is not configured. Recommended for HTTPS sites. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 138.197.62.195
Compression gzip
ℹ 🔵 Missing HSTS HTTP Strict Transport Security is not configured. Recommended for HTTPS sites.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Performance
| DNS Lookup | 17.8 ms |
| TCP Connect | 109.8 ms |
| TLS Handshake | 97.9 ms |
| Time To First Byte (TTFB) | 466.8 ms |
| Content Download | 92.3 ms |
| Total Response Time | 559.1 ms |
DNS Lookup 17.8 ms
TCP Connect 109.8 ms
TLS Handshake 97.9 ms
Time To First Byte (TTFB) 466.8 ms
Content Download 92.3 ms
Total Response Time 559.1 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✘ Not configured |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✘ Not configured
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
Detected Technologies
| Technology | Google Analytics Google Tag Manager Node.js |
Technology Google Analytics Google Tag Manager Node.js
HTTP Headers
| Alt-svc
| h3=":443"; ma=2592000 |
| Cache-control
| max-age=0, private, must-revalidate |
| Content-encoding
| gzip |
| Content-security-policy
| frame-ancestors https://*.whitney.org http://localhost:* |
| Content-type
| text/html; charset=utf-8 |
| Etag
| W/"f3b2ad091ac387df1ebb16775a015004" |
| Link
| ; rel=preload; as=style; nopush,; rel=modulepreload; as=script; nopush,; rel=modulepreload; as=script; nopush |
| Referrer-policy
| strict-origin-when-cross-origin |
| Set-cookie
| _whitney_session=zpa07RgRvCT%2FgqszNyCb1gNEiIvAK%2BHbEK1KtWRbThJQR%2FraQAZcRJ%2BrBZXe9X%2BHqcP7YzUpRaqvEwZ5Tr7kxYB3oOGW7hhRBgmxVCLmcRNEaeh865TrVSEN9yuLSWjqQDXJQSzdFR6%2F8YfBQYOxWThw9DuXA02fTQfXszcabfLQe43MTuZ2D%2BjcYkRLKvZaBpmqCOP2VW8ltuKo0ZulVGslU%2B%2F%2FVqQbGV5kDGKGoN8oXvJ9suWVB4V6Vwxu2%2BRIMDzg17dA6m6ujvIumjCAMXPiRqPcf66g--8hh8l%2F8gMhEiuYkN--LW50epMuWyttYqlrgyOdVQ%3D%3D; domain=whitney.org; path=/; secure; httponly; samesite=lax |
| Vary
| Accept-Encoding |
| Via
| 1.1 Caddy |
| X-content-type-options
| nosniff |
| X-permitted-cross-domain-policies
| none |
| X-request-id
| 8c437113-21eb-4e20-8990-3efe24cc5832 |
| X-runtime
| 0.161607 |
| X-xss-protection
| 0 |
| Date
| Wed, 29 Jul 2026 02:14:27 GMT |
Meta Tags
| Viewport | width=device-width, initial-scale=1, viewport-fit=cover |
| Google-site-verification | 7H-upWFqE2QIpO83eIsNxpEUchG7lrWFMOZlOzoM3GI |
| Theme-color | #FFFFFF |
| Color-scheme | dark light |
| Turbo-cache-control | no-cache |
| Turbo-prefetch | false |
| Description | The Whitney Museum of American Art. Explore works, exhibitions, and events online. Located in New York City. |
| Csrf-param | authenticity_token |
| Csrf-token | sEZLSiyh3Qc7MXnoM8HvwrClC00rEuVDlqCCxGxnXBP_FN3Mos2Q0MeVAMtGrdh1OqD89RnJMs_o1rZekUocLQ |
| Action-cable-url | /cable |
Alt-svc h3=":443"; ma=2592000
Cache-control max-age=0, private, must-revalidate
Content-encoding gzip
Content-security-policy frame-ancestors https://*.whitney.org http://localhost:*
Content-type text/html; charset=utf-8
Etag W/"f3b2ad091ac387df1ebb16775a015004"
Link ; rel=preload; as=style; nopush,; rel=modulepreload; as=script; nopush,; rel=modulepreload; as=script; nopush
Referrer-policy strict-origin-when-cross-origin
Set-cookie _whitney_session=zpa07RgRvCT%2FgqszNyCb1gNEiIvAK%2BHbEK1KtWRbThJQR%2FraQAZcRJ%2BrBZXe9X%2BHqcP7YzUpRaqvEwZ5Tr7kxYB3oOGW7hhRBgmxVCLmcRNEaeh865TrVSEN9yuLSWjqQDXJQSzdFR6%2F8YfBQYOxWThw9DuXA02fTQfXszcabfLQe43MTuZ2D%2BjcYkRLKvZaBpmqCOP2VW8ltuKo0ZulVGslU%2B%2F%2FVqQbGV5kDGKGoN8oXvJ9suWVB4V6Vwxu2%2BRIMDzg17dA6m6ujvIumjCAMXPiRqPcf66g--8hh8l%2F8gMhEiuYkN--LW50epMuWyttYqlrgyOdVQ%3D%3D; domain=whitney.org; path=/; secure; httponly; samesite=lax
Vary Accept-Encoding
Via 1.1 Caddy
X-content-type-options nosniff
X-permitted-cross-domain-policies none
X-request-id 8c437113-21eb-4e20-8990-3efe24cc5832
X-runtime 0.161607
X-xss-protection 0
Date Wed, 29 Jul 2026 02:14:27 GMT
