Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 143.204.1.43 |
| Server Software | AmazonS3 |
| CDN | CDN (RefreshHit from cloudfront) |
| Compression | gzip |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 143.204.1.43
Server Software AmazonS3
CDN CDN (RefreshHit from cloudfront)
Compression gzip
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Performance
| DNS Lookup | 202.9 ms |
| TCP Connect | 343.2 ms |
| TLS Handshake | 144.7 ms |
| Time To First Byte (TTFB) | 705.5 ms |
| Content Download | 2.5 ms |
| Total Response Time | 708 ms |
DNS Lookup 202.9 ms
TCP Connect 343.2 ms
TLS Handshake 144.7 ms
Time To First Byte (TTFB) 705.5 ms
Content Download 2.5 ms
Total Response Time 708 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=86400 |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=86400
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | University of California | Office of The President |
Title University of California | Office of The President
Detected Technologies
| Technology | Bootstrap jQuery Google Analytics Google Tag Manager PHP |
Technology Bootstrap jQuery Google Analytics Google Tag Manager PHP
HTTP Headers
| Content-Type
| text/html; charset=utf-8 |
| Transfer-Encoding
| chunked |
| Connection
| keep-alive |
| Server
| AmazonS3 |
| Last-Modified
| Wed, 12 Aug 2026 21:09:40 GMT |
| Content-Encoding
| gzip |
| X-amz-server-side-encryption
| AES256 |
| X-amz-version-id
| eEohP60M3OczAADsqOHMiGszn3Y.SU.4 |
| Date
| Mon, 24 Aug 2026 07:45:06 GMT |
| ETag
| W/"e3628a1fffad67c41df834d58f68e790" |
| Vary
| Accept-Encoding |
| X-Cache
| RefreshHit from cloudfront |
| Via
| 1.1 6daec11ce051cffaa3e440291c9bdce2.cloudfront.net (CloudFront) |
| X-Amz-Cf-Pop
| HIO52-P5 |
| X-Amz-Cf-Id
| AAABoggOj3s2uNGe7JO6FZtiCnsRmiK_afv72SsnHdDY91h7DvKi5A== |
| Content-Security-Policy
| frame-ancestors 'self';block-all-mixed-content;default-src 'self';script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' web-cdn.ucop.edu ajax.googleapis.com cse.google.com google-analytics.com googletagmanager.com maxcdn.bootstrapcdn.com m.youtube.com netdna.bootstrapcdn.com stackpath.bootstrapcdn.com ssl.google-analytics.com tagmanager.google.com www.google-analytics.com www.google.com www.googletagmanager.com www.youtube.com *.spectate.com s3.amazonaws.com;style-src 'self' 'report-sample' 'unsafe-inline' web-cdn.ucop.edu *.google.com *.bootstrapcdn.com ajax.googleapis.com www.googletagmanager.com cdn-images.mailchimp.com *.mailchimp.com;object-src 'none';frame-src 'self' *.youtube.com syndicatedsearch.goog www.googletagmanager.com www.youtube-nocookie.com *.spectate.com;child-src 'self' www.googletagmanager.com www.youtube.com;img-src 'self' data: blob: *.ytimg.com *.youtube.com *.google.com *.google-analytics.com ajax.googleapis.com www.googletagmanager.com *.ucop.edu ucop.edu;font-src 'self' data: *.bootstrapcdn.com;connect-src 'self' *.google.com ajax.googleapis.com stats.g.doubleclick.net www.google-analytics.com www.googletagmanager.com *.amazonaws.com; |
| X-Content-Type-Options
| nosniff |
| Strict-Transport-Security
| max-age=86400 |
Meta Tags
| Id | 93ea8d8f80306553768e7b8405430ef1 |
Content-Type text/html; charset=utf-8
Transfer-Encoding chunked
Connection keep-alive
Server AmazonS3
Last-Modified Wed, 12 Aug 2026 21:09:40 GMT
Content-Encoding gzip
X-amz-server-side-encryption AES256
X-amz-version-id eEohP60M3OczAADsqOHMiGszn3Y.SU.4
Date Mon, 24 Aug 2026 07:45:06 GMT
ETag W/"e3628a1fffad67c41df834d58f68e790"
Vary Accept-Encoding
X-Cache RefreshHit from cloudfront
Via 1.1 6daec11ce051cffaa3e440291c9bdce2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop HIO52-P5
X-Amz-Cf-Id AAABoggOj3s2uNGe7JO6FZtiCnsRmiK_afv72SsnHdDY91h7DvKi5A==
Content-Security-Policy frame-ancestors 'self';block-all-mixed-content;default-src 'self';script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' web-cdn.ucop.edu ajax.googleapis.com cse.google.com google-analytics.com googletagmanager.com maxcdn.bootstrapcdn.com m.youtube.com netdna.bootstrapcdn.com stackpath.bootstrapcdn.com ssl.google-analytics.com tagmanager.google.com www.google-analytics.com www.google.com www.googletagmanager.com www.youtube.com *.spectate.com s3.amazonaws.com;style-src 'self' 'report-sample' 'unsafe-inline' web-cdn.ucop.edu *.google.com *.bootstrapcdn.com ajax.googleapis.com www.googletagmanager.com cdn-images.mailchimp.com *.mailchimp.com;object-src 'none';frame-src 'self' *.youtube.com syndicatedsearch.goog www.googletagmanager.com www.youtube-nocookie.com *.spectate.com;child-src 'self' www.googletagmanager.com www.youtube.com;img-src 'self' data: blob: *.ytimg.com *.youtube.com *.google.com *.google-analytics.com ajax.googleapis.com www.googletagmanager.com *.ucop.edu ucop.edu;font-src 'self' data: *.bootstrapcdn.com;connect-src 'self' *.google.com ajax.googleapis.com stats.g.doubleclick.net www.google-analytics.com www.googletagmanager.com *.amazonaws.com;
X-Content-Type-Options nosniff
Strict-Transport-Security max-age=86400
