Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 76.76.21.21 |
| Server Software | Vercel |
| CDN | Vercel |
| Compression | gzip |
|
ℹ 🔵 Missing Content Security Policy | CSP is not configured. It helps prevent XSS attacks and content injection. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 76.76.21.21
Server Software Vercel
CDN Vercel
Compression gzip
ℹ 🔵 Missing Content Security Policy CSP is not configured. It helps prevent XSS attacks and content injection.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://xop.com:443 | 308 | HTTP/2 308 |
| 2 | https://www.xop.com/ | 200 | HTTP/2 200 |
#1 URL https://xop.com:443
HTTP Status Code 308
Status HTTP/2 308
#2 URL https://www.xop.com/
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 151.3 ms |
| TCP Connect | 152.4 ms |
| TLS Handshake | 10.6 ms |
| Time To First Byte (TTFB) | 178.9 ms |
| Content Download | 0.5 ms |
| Total Response Time | 179.4 ms |
DNS Lookup 151.3 ms
TCP Connect 152.4 ms
TLS Handshake 10.6 ms
Time To First Byte (TTFB) 178.9 ms
Content Download 0.5 ms
Total Response Time 179.4 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=63072000 |
| CSP | ⚠ Not configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ⚠ Not configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=63072000
CSP ⚠ Not configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ⚠ Not configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
Title Home | XOP
Detected Technologies
| Technology | React Google Analytics Next.js |
Technology React Google Analytics Next.js
HTTP Headers
| Access-control-allow-origin
| * |
| Age
| 37058 |
| Cache-control
| public, max-age=0, must-revalidate |
| Content-disposition
| inline |
| Content-encoding
| gzip |
| Content-type
| text/html; charset=utf-8 |
| Date
| Tue, 28 Jul 2026 18:44:52 GMT |
| Etag
| W/"8079b59558793a838bf2f3f764274fbe" |
| Last-modified
| Tue, 28 Jul 2026 08:27:14 GMT |
| Server
| Vercel |
| Strict-transport-security
| max-age=63072000 |
| X-matched-path
| / |
| X-vercel-cache
| HIT |
| X-vercel-id
| cdg1::h6vsr-1785264292788-178b4af75184 |
Meta Tags
| Viewport | width=device-width |
| Next-head-count | 6 |
Access-control-allow-origin *
Age 37058
Cache-control public, max-age=0, must-revalidate
Content-disposition inline
Content-encoding gzip
Content-type text/html; charset=utf-8
Date Tue, 28 Jul 2026 18:44:52 GMT
Etag W/"8079b59558793a838bf2f3f764274fbe"
Last-modified Tue, 28 Jul 2026 08:27:14 GMT
Server Vercel
Strict-transport-security max-age=63072000
X-matched-path /
X-vercel-cache HIT
X-vercel-id cdg1::h6vsr-1785264292788-178b4af75184
