Technical Information
| HTTP Status Code | 403 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 23.21.228.79 |
| Server Software | nginx |
| CDN | CDN (MISS) |
|
🚫 🟡 HTTP 403 Error | The server returned a 403 error. Check the access configuration. |
HTTP Status Code 403
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 23.21.228.79
Server Software nginx
CDN CDN (MISS)
🚫 🟡 HTTP 403 Error The server returned a 403 error. Check the access configuration.
Performance
| DNS Lookup | 202.9 ms |
| TCP Connect | 285.8 ms |
| TLS Handshake | 168.9 ms |
| Time To First Byte (TTFB) | 623 ms |
| Content Download | 0.1 ms |
| Total Response Time | 623.1 ms |
DNS Lookup 202.9 ms
TCP Connect 285.8 ms
TLS Handshake 168.9 ms
Time To First Byte (TTFB) 623 ms
Content Download 0.1 ms
Total Response Time 623.1 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=31536000; includeSubDomains; preload |
| CSP | ✔ Configured |
| X-Frame-Options | ✔ SAMEORIGIN |
| X-Content-Type-Options | ✔ nosniff |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=31536000; includeSubDomains; preload
CSP ✔ Configured
X-Frame-Options ✔ SAMEORIGIN
X-Content-Type-Options ✔ nosniff
HTTP/2 ⚠ HTTP/1.1
Detected Technologies
| Technology | Drupal Google Analytics Google Tag Manager Cloudflare Nginx |
Technology Drupal Google Analytics Google Tag Manager Cloudflare Nginx
HTTP Headers
| Server | nginx |
| Date | Fri, 24 Jul 2026 18:06:21 GMT |
| Content-type | text/html; charset=UTF-8 |
| Content-length | 86 |
| Cache-control | must-revalidate, no-cache, no-store, private |
| X-content-type-options | nosniff |
| X-drupal-dynamic-cache | UNCACHEABLE (no cacheability) |
| Content-language | en |
| X-frame-options | SAMEORIGIN |
| Expires | Sun, 19 Nov 1978 05:00:00 GMT |
| X-generator | Drupal 10 (https://www.drupal.org) |
| Content-security-policy | default-src 'self' public.govdelivery.com www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com fonts.gstatic.com api.kudoway.com stats.g.doubleclick.net cdn-broadcast002-iad.tokbox.com prd.jwpltx.com blob: cdn-broadcast002-pdx.tokbox.com *.tokbox.com www.odwebp.svc.ms public.tableau.com recapd.com *.googleapis.com *.google-analytics.com player.vimeo.com; connect-src 'self' public.govdelivery.com www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com fonts.gstatic.com api.kudoway.com stats.g.doubleclick.net cdn-broadcast002-iad.tokbox.com prd.jwpltx.com blob: cdn-broadcast002-pdx.tokbox.com *.tokbox.com www.odwebp.svc.ms public.tableau.com recapd.com *.googleapis.com *.google-analytics.com player.vimeo.com https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' fast.fonts.net fonts.gstatic.com; img-src 'self' i.ytimg.com www.gstatic.com www.google-analytics.com translate.googleapis.com data: fonts.gstatic.com www.google.com translate.google.com https://www.google-analytics.com https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' public.govdelivery.com www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com stats.g.doubleclick.net ssl.p.jwpcdn.com content.jwplatform.com developer.jwplayer.com www.gstatic.com *.googleapis.com blob: player.vimeo.com cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://dap.digitalgov.gov https://polyfill-fastly.io https://www.google.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' public.govdelivery.com www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com ssl.p.jwpcdn.com content.jwplatform.com translate.google.com *.googleapis.com player.vimeo.com cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://dap.digitalgov.gov https://polyfill-fastly.io https://www.google.com; style-src 'self' 'unsafe-inline' www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com fast.fonts.net kudo-widget.s3.amazonaws.com www.gstatic.com *.googleapis.com cdnjs.cloudflare.com fonts.googleapis.com https://cdnjs.cloudflare.com https://fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self' |
| X-xss-protection | 1 |
| Strict-transport-security | max-age=31536000; includeSubDomains; preload |
| X-drupal-cache | UNCACHEABLE (no cacheability) |
| X-request-id | v-60756948-878a-11f1-adeb-638669b59ae0 |
| X-ah-environment | prod |
| Age | 0 |
| Via | varnish |
| X-cache | MISS |
Server nginx
Date Fri, 24 Jul 2026 18:06:21 GMT
Content-type text/html; charset=UTF-8
Content-length 86
Cache-control must-revalidate, no-cache, no-store, private
X-content-type-options nosniff
X-drupal-dynamic-cache UNCACHEABLE (no cacheability)
Content-language en
X-frame-options SAMEORIGIN
Expires Sun, 19 Nov 1978 05:00:00 GMT
X-generator Drupal 10 (https://www.drupal.org)
Content-security-policy default-src 'self' public.govdelivery.com www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com fonts.gstatic.com api.kudoway.com stats.g.doubleclick.net cdn-broadcast002-iad.tokbox.com prd.jwpltx.com blob: cdn-broadcast002-pdx.tokbox.com *.tokbox.com www.odwebp.svc.ms public.tableau.com recapd.com *.googleapis.com *.google-analytics.com player.vimeo.com; connect-src 'self' public.govdelivery.com www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com fonts.gstatic.com api.kudoway.com stats.g.doubleclick.net cdn-broadcast002-iad.tokbox.com prd.jwpltx.com blob: cdn-broadcast002-pdx.tokbox.com *.tokbox.com www.odwebp.svc.ms public.tableau.com recapd.com *.googleapis.com *.google-analytics.com player.vimeo.com https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' fast.fonts.net fonts.gstatic.com; img-src 'self' i.ytimg.com www.gstatic.com www.google-analytics.com translate.googleapis.com data: fonts.gstatic.com www.google.com translate.google.com https://www.google-analytics.com https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' public.govdelivery.com www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com stats.g.doubleclick.net ssl.p.jwpcdn.com content.jwplatform.com developer.jwplayer.com www.gstatic.com *.googleapis.com blob: player.vimeo.com cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://dap.digitalgov.gov https://polyfill-fastly.io https://www.google.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' public.govdelivery.com www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com js-agent.newrelic.com bam.nr-data.net kudo-widget.s3.amazonaws.com ssl.p.jwpcdn.com content.jwplatform.com translate.google.com *.googleapis.com player.vimeo.com cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://dap.digitalgov.gov https://polyfill-fastly.io https://www.google.com; style-src 'self' 'unsafe-inline' www.googletagmanager.com www.youtube.com dap.digitalgov.gov www.google-analytics.com s.ytimg.com fast.fonts.net kudo-widget.s3.amazonaws.com www.gstatic.com *.googleapis.com cdnjs.cloudflare.com fonts.googleapis.com https://cdnjs.cloudflare.com https://fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self'
X-xss-protection 1
Strict-transport-security max-age=31536000; includeSubDomains; preload
X-drupal-cache UNCACHEABLE (no cacheability)
X-request-id v-60756948-878a-11f1-adeb-638669b59ae0
X-ah-environment prod
Age 0
Via varnish
X-cache MISS
