Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 138.197.62.195 |
| Compression | gzip |
|
ℹ 🔵 Missing HSTS | HTTP Strict Transport Security is not configured. Recommended for HTTPS sites. |
|
ℹ 🔵 Missing X-Frame-Options | The site can be embedded in iframes by third parties (clickjacking risk). |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 138.197.62.195
Compression gzip
ℹ 🔵 Missing HSTS HTTP Strict Transport Security is not configured. Recommended for HTTPS sites.
ℹ 🔵 Missing X-Frame-Options The site can be embedded in iframes by third parties (clickjacking risk).
Performance
| DNS Lookup | 13.6 ms |
| TCP Connect | 104.8 ms |
| TLS Handshake | 98.8 ms |
| Time To First Byte (TTFB) | 399 ms |
| Content Download | 91.1 ms |
| Total Response Time | 490.1 ms |
DNS Lookup 13.6 ms
TCP Connect 104.8 ms
TLS Handshake 98.8 ms
Time To First Byte (TTFB) 399 ms
Content Download 91.1 ms
Total Response Time 490.1 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✘ Not configured |
| CSP | ✔ Configured |
| X-Frame-Options | ⚠ Not configured |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | strict-origin-when-cross-origin |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✘ Not configured
CSP ✔ Configured
X-Frame-Options ⚠ Not configured
X-Content-Type-Options ✔ nosniff
Referrer Policy strict-origin-when-cross-origin
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
Detected Technologies
| Technology | Google Analytics Google Tag Manager |
Technology Google Analytics Google Tag Manager
HTTP Headers
| Alt-svc
| h3=":443"; ma=2592000 |
| Cache-control
| max-age=0, private, must-revalidate |
| Content-encoding
| gzip |
| Content-security-policy
| frame-ancestors https://*.whitney.org http://localhost:* |
| Content-type
| text/html; charset=utf-8 |
| Etag
| W/"8bb1260e02c22c3ca48fca88e4141658" |
| Link
| ; rel=preload; as=style; nopush,; rel=modulepreload; as=script; nopush,; rel=modulepreload; as=script; nopush |
| Referrer-policy
| strict-origin-when-cross-origin |
| Set-cookie
| _whitney_session=xlkoe2gj2XcFJBjCo%2Fnn57Q0mgcVBuiWhmxQceZH2Za4fkn4I8QIGhasOVGC3%2BX70zSlynWdaq9VhCAphounBDvJb1qt1URf2oJSLxRANafS0iF4YC9Ph7y%2BOK3Lu3NbwFtSUjs8HidybLoM10EM6ed8j7QF46BbE6ivvkPf0WMEqf1xBy%2FbwXVww0TvWo2mzVw9hmq%2B3%2F2V0tP9N2voEVMINdprHXmoqrwekRPqNpbWOngtuzk4HwjOaRdr9V9He3b0CAfOYCCDz7X5Z7Tn9E%2FVX4P%2F8WSz--v1hrYCPTJ4KoxD75--k1JCfqm4ETCINNyRGypeKQ%3D%3D; domain=whitney.org; path=/; secure; httponly; samesite=lax |
| Vary
| Accept-Encoding |
| Via
| 1.1 Caddy |
| X-content-type-options
| nosniff |
| X-permitted-cross-domain-policies
| none |
| X-request-id
| b0b788de-e61c-4017-afe0-06c0095bdb71 |
| X-runtime
| 0.100509 |
| X-xss-protection
| 0 |
| Date
| Wed, 26 Aug 2026 02:41:42 GMT |
Meta Tags
| Viewport | width=device-width, initial-scale=1, viewport-fit=cover |
| Google-site-verification | 7H-upWFqE2QIpO83eIsNxpEUchG7lrWFMOZlOzoM3GI |
| Theme-color | #FFFFFF |
| Color-scheme | dark light |
| Turbo-cache-control | no-cache |
| Turbo-prefetch | false |
| Description | The Whitney Museum of American Art. Explore works, exhibitions, and events online. Located in New York City. |
| Csrf-param | authenticity_token |
| Csrf-token | CzoWS3ECdfS7UF3CU6rzeduLyzainNwu1rndo8L3PKpPZqLI2J--Df06K3ddjs5mZTft2cJFKunWgttiYtHvgQ |
| Action-cable-url | /cable |
Alt-svc h3=":443"; ma=2592000
Cache-control max-age=0, private, must-revalidate
Content-encoding gzip
Content-security-policy frame-ancestors https://*.whitney.org http://localhost:*
Content-type text/html; charset=utf-8
Etag W/"8bb1260e02c22c3ca48fca88e4141658"
Link ; rel=preload; as=style; nopush,; rel=modulepreload; as=script; nopush,; rel=modulepreload; as=script; nopush
Referrer-policy strict-origin-when-cross-origin
Set-cookie _whitney_session=xlkoe2gj2XcFJBjCo%2Fnn57Q0mgcVBuiWhmxQceZH2Za4fkn4I8QIGhasOVGC3%2BX70zSlynWdaq9VhCAphounBDvJb1qt1URf2oJSLxRANafS0iF4YC9Ph7y%2BOK3Lu3NbwFtSUjs8HidybLoM10EM6ed8j7QF46BbE6ivvkPf0WMEqf1xBy%2FbwXVww0TvWo2mzVw9hmq%2B3%2F2V0tP9N2voEVMINdprHXmoqrwekRPqNpbWOngtuzk4HwjOaRdr9V9He3b0CAfOYCCDz7X5Z7Tn9E%2FVX4P%2F8WSz--v1hrYCPTJ4KoxD75--k1JCfqm4ETCINNyRGypeKQ%3D%3D; domain=whitney.org; path=/; secure; httponly; samesite=lax
Vary Accept-Encoding
Via 1.1 Caddy
X-content-type-options nosniff
X-permitted-cross-domain-policies none
X-request-id b0b788de-e61c-4017-afe0-06c0095bdb71
X-runtime 0.100509
X-xss-protection 0
Date Wed, 26 Aug 2026 02:41:42 GMT
