HTTP headers
Response
200 https://example.com/ 4 ms
| accept-ranges | bytes |
|---|---|
| age | 10550 |
| allow | GET, HEAD |
| cf-cache-status | HIT |
| cf-ray | a56277152baef689-CMH |
| connection | close |
| content-type | text/html; charset=utf-8 |
| date | Fri, 06 Nov 2026 07:43:04 GMT |
| last-modified | Thu, 05 Nov 2026 21:17:41 GMT |
| server | cloudflare |
| transfer-encoding | chunked |
Security headers
| Missing | Strict-Transport-Security Forces HTTPS on future visits. |
| Missing | Content-Security-Policy Limits where scripts and other content can load from. |
| Missing | X-Content-Type-Options Stops browsers guessing file types (should be “nosniff”). |
| Missing | X-Frame-Options Stops other sites framing this page (or use CSP frame-ancestors). |
| Missing | Referrer-Policy Controls how much of the URL is shared with other sites. |
| Missing | Permissions-Policy Restricts access to camera, microphone, location and similar. |