NexaYori Webmaster HTTP headersHelp
HTTP headers

2 hops

301 https://cloudflare.com/ 2 ms
cf-raya56277224a9bf689-CMH
connectionclose
content-typetext/html; charset=UTF-8
dateFri, 06 Nov 2026 07:43:06 GMT
locationhttps://www.cloudflare.com/
nel{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qpRuv7pUgEHCNsL0d%2BSij73fUzXFrA7gRHGTcogRzFinylEASoDrOfLPfSLEOOHgo6%2F2UvngKY7CLvCUUACd3B4xdJPTzSqo5TX6wuZWuwNnaihB1vs6EKnABCMaibG%2F1IfkCyT7Y9urFL%2Fs"}]}
servercloudflare
set-cookie__cf_bm=vDC4h8s0jVKm.qa6Eyy8DLBr00zzM7s9PlV93Z4jGOY-1793950986.60612-1.0.1.1-bXWwNpDGaGmX8pW0nmKu77TOLgnLYep0z2uK29vkYht40KRzBInir.p6vxOVyTj.lE6VX0U9Iq78ZG9E898mby9tj7vrPJJicF5P2DEYt8XGxMATxTsHe5.Su7yMKn2H; HttpOnly; SameSite=None; Secure; Path=/; Domain=cloudflare.com; Expires=Fri, 06 Nov 2026 08:13:06 GMT
strict-transport-securitymax-age=15780000; includeSubDomains
transfer-encodingchunked
200 https://www.cloudflare.com/ 38 ms
accept-rangesbytes
age1
cache-controlmax-age=10
cf-cache-statusHIT
cf-raya56277224aa5f689-CMH
connectionclose
content-length1334957
content-security-policydefault-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://static-staging.cloudflareinsights.com https://challenges.cloudflare.com https://*.onetrust.com https://cdn.cookielaw.org https://ot.www.cloudflare.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://adservice.google.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://platform.twitter.com https://static.ads-twitter.com https://scripts.demandbase.com https://tag.demandbase.com https://*.6sc.co https://*.qualified.com https://snap.licdn.com https://bat.bing.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.doubleclick.net https://www.googleadservices.com https://translate.googleapis.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://ads-twitter.com https://analytics.twitter.com https://*.twimg.com https://api.demandbase.com https://scripts.demandbase.com https://tag.demandbase.com https://tag-logger.demandbase.com https://api.company-target.com https://*.6sc.co https://epsilon.6sense.com https://*.qualified.com https://*.ads.linkedin.com https://www.linkedin.com https://bat.bing.com https: wss://*.qualified.com wss://*.registrar.cloudflare.com; frame-src https://*.adsrvr.org https://*.cloudflare.com https://*.videodelivery.net https://*.cloudflarestream.com https://www.googletagmanager.com https://*.qualified.com https://td.doubleclick.net https://bid.g.doubleclick.net https://9309168.fls.doubleclick.net https://9973066.fls.doubleclick.net https://s.company-target.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; worker-src 'self' blob:; child-src 'self' blob:; upgrade-insecure-requests
content-typetext/html; charset=utf-8
cross-origin-opener-policyunsafe-none
cross-origin-resource-policycross-origin
dateFri, 06 Nov 2026 07:43:06 GMT
link<https://www.cloudflare.com/.well-known/api-catalog>; rel="api-catalog", <https://www.cloudflare.com/.well-known/agents.json>; rel="service-desc", <https://www.cloudflare.com/.well-known/webmcp.json>; rel="service-desc", <https://www.cloudflare.com/openapi.json>; rel="service-desc", <https://www.cloudflare.com/llms.txt>; rel="service-doc", <https://www.cloudflare.com/sitemap.xml>; rel="sitemap", </fonts/Kunst%20Grotesk%20Regular.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin, </fonts/Kunst%20Grotesk%20Medium.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin, <https://ot.www.cloudflare.com>; rel=preconnect; crossorigin, <https://imagedelivery.net>; rel=preconnect; crossorigin, </static/hero-poster.avif>; rel=preload; as=image; type="image/avif"; fetchpriority=high
nel{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
permissions-policygeolocation=(), camera=(), microphone=()
referrer-policystrict-origin-when-cross-origin
report-to{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Cno7oPVKcOIcDPAH8btt9COjQ%2Bbp04NcDpDBxwk6WPWOFcJ9KBlom%2FF%2Byr1UcA%2FxxmILHnuJfsGmJSX14NDjcrcejyv%2BXPE4eTksRyXDkmObOdNHQE2O8hvIJStQbtyFcb4C4TJTToSu5jHVN%2BC6Vg%3D%3D"}]}
servercloudflare
set-cookie__cf_bm=nlW52e8RjYqqnp9l_j.l64kuSf5gWnRwDGoXPyeurQw-1793950986.6090326-1.0.1.1-CE9LbvnRTe2n4JCFsm2iqh.k_IGvp_aduMDQKipXcOSJaa3lSKvW13xo6YODJRzyWAcpez92n.zYvClG.BRFx15.TMVPWq_WwzX_GQjco7sFMSMazJKZ3PjPAqDiOJ37Taf9moHm3nbTcsRa9_g0jA; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.cloudflare.com; Expires=Fri, 06 Nov 2026 08:13:06 GMT
set-cookiekndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1MTkzNTE5MjUzNTUzMjE5MzU2Mzc5MjcxMjYzOTk4MjIxNTkzMlIOCIfjvv6aNCoDVkE2MALwAYfjvv6aNA==; Expires=Mon, 06 Dec 2027 07:43:06 GMT; Path=/; Secure; SameSite=Lax
set-cookiecfz_adobe={"MsVJ_ecid":{"v":"CiY1MTkzNTE5MjUzNTUzMjE5MzU2Mzc5MjcxMjYzOTk4MjIxNTkzMlIOCIfjvv6aNCoDVkE2MALwAYfjvv6aNA==","e":1828078986637}}; Expires=Mon Dec 06 2027 07:43:06 GMT+0000 (Coordinated Universal Time); HttpOnly; SameSite=Lax; Path=/; Secure
set-cookiecfz_google-analytics_v4={"nzcr_ga4":{"v":"a6d813a2-0a23-44f6-a502-00303e394cdc","e":1828078986613}}; Expires=Mon Dec 06 2027 07:43:06 GMT+0000 (Coordinated Universal Time); HttpOnly; SameSite=Lax; Path=/; Secure
set-cookie_ga=GA1.1.a6d813a2-0a23-44f6-a502-00303e394cdc; Expires=Mon, 06 Dec 2027 07:43:06 GMT; Path=/
strict-transport-securitymax-age=31536000; includeSubDomains
varyaccept-encoding
x-content-type-optionsnosniff
x-frame-optionsSAMEORIGIN
x-rmGW
x-served-bymarketing-site
x-xss-protection1; mode=block

Security headers

✓ Set Strict-Transport-Security
Forces HTTPS on future visits.
✓ Set Content-Security-Policy
Limits where scripts and other content can load from.
✓ Set X-Content-Type-Options
Stops browsers guessing file types (should be “nosniff”).
✓ Set X-Frame-Options
Stops other sites framing this page (or use CSP frame-ancestors).
✓ Set Referrer-Policy
Controls how much of the URL is shared with other sites.
✓ Set Permissions-Policy
Restricts access to camera, microphone, location and similar.
URLs are fetched from Cloudflare’s network with a plain GET, one hop at a time, without following JavaScript or meta refreshes. Terminal: curl "…/headers?q=example.com"