NexaYori Tools HTTP headersHelp
HTTP headers

2 hops

301 https://cloudflare.com/ 5 ms
cf-raya562c49ef897f689-CMH
connectionclose
content-typetext/html; charset=UTF-8
dateFri, 06 Nov 2026 08:35:59 GMT
locationhttps://www.cloudflare.com/
nel{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=iPmbNU%2BKg4x%2BAOPrGZlRk2Zql50UsLRLatWIpA4B8y5epEl2%2F%2F7SgUaN2eQgarusD1sZxzgRa6eFKeDr1cti8rQf54gAWB83DLKxg9b51Y2SWM%2Bb2mSdfe%2B14TPhkM7ICXSOMnsZ2laRdMEM"}]}
servercloudflare
set-cookie__cf_bm=lLEMKuVbSqybLhrU6QY36sV7zvjyhRpvmwvTRtdytjk-1793954160.4794984-1.0.1.1-H_AHb3vLTMMv1bhMV6vf4jLFi9MwY6hpsx6a6T4hRelqaSkTJOyM1igds1YbgZx7mhS3Y7wstmqsoEAklp3Vv7_DR9scgim.e5kJ6_763kFvLPdt0s.iXKCYs1XSR3Ua; HttpOnly; SameSite=None; Secure; Path=/; Domain=cloudflare.com; Expires=Fri, 06 Nov 2026 09:06:00 GMT
strict-transport-securitymax-age=15780000; includeSubDomains
transfer-encodingchunked
200 https://www.cloudflare.com/ 43 ms
accept-rangesbytes
age1
cache-controlmax-age=10
cf-cache-statusHIT
cf-raya562c49f08a3f689-CMH
connectionclose
content-length1334957
content-security-policydefault-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://static-staging.cloudflareinsights.com https://challenges.cloudflare.com https://*.onetrust.com https://cdn.cookielaw.org https://ot.www.cloudflare.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://adservice.google.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://platform.twitter.com https://static.ads-twitter.com https://scripts.demandbase.com https://tag.demandbase.com https://*.6sc.co https://*.qualified.com https://snap.licdn.com https://bat.bing.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.doubleclick.net https://www.googleadservices.com https://translate.googleapis.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://ads-twitter.com https://analytics.twitter.com https://*.twimg.com https://api.demandbase.com https://scripts.demandbase.com https://tag.demandbase.com https://tag-logger.demandbase.com https://api.company-target.com https://*.6sc.co https://epsilon.6sense.com https://*.qualified.com https://*.ads.linkedin.com https://www.linkedin.com https://bat.bing.com https: wss://*.qualified.com wss://*.registrar.cloudflare.com; frame-src https://*.adsrvr.org https://*.cloudflare.com https://*.videodelivery.net https://*.cloudflarestream.com https://www.googletagmanager.com https://*.qualified.com https://td.doubleclick.net https://bid.g.doubleclick.net https://9309168.fls.doubleclick.net https://9973066.fls.doubleclick.net https://s.company-target.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; worker-src 'self' blob:; child-src 'self' blob:; upgrade-insecure-requests
content-typetext/html; charset=utf-8
cross-origin-opener-policyunsafe-none
cross-origin-resource-policycross-origin
dateFri, 06 Nov 2026 08:36:00 GMT
link<https://www.cloudflare.com/.well-known/api-catalog>; rel="api-catalog", <https://www.cloudflare.com/.well-known/agents.json>; rel="service-desc", <https://www.cloudflare.com/.well-known/webmcp.json>; rel="service-desc", <https://www.cloudflare.com/openapi.json>; rel="service-desc", <https://www.cloudflare.com/llms.txt>; rel="service-doc", <https://www.cloudflare.com/sitemap.xml>; rel="sitemap", </fonts/Kunst%20Grotesk%20Regular.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin, </fonts/Kunst%20Grotesk%20Medium.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin, <https://ot.www.cloudflare.com>; rel=preconnect; crossorigin, <https://imagedelivery.net>; rel=preconnect; crossorigin, </static/hero-poster.avif>; rel=preload; as=image; type="image/avif"; fetchpriority=high
nel{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
permissions-policygeolocation=(), camera=(), microphone=()
referrer-policystrict-origin-when-cross-origin
report-to{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2ByL3YFIZgFw08gQBX4KkrKSGtg831Q13%2BRNPyUzRXBCmV5RKOfxQHX%2FgENiD4eH78MJ3Vs45rUzl7QaQsM2SbelUHVqw6T4NU1aGhC1HyvMD8iextQbU8kAeNWDLGT%2FPxkpS6NyZUpqkTNto2o%2BsoA%3D%3D"}]}
servercloudflare
set-cookie__cf_bm=VMhPil9BDz3F12CYNAnvsQEiI_yN.FpheGQVjz.k594-1793954160.4832158-1.0.1.1-a5YmLOxVBPCeFJJb0jw4lJohwbBgbkO0QVNqmWysgFLtU1mncOWOFGHFFNMWd.X9Avc941f5gyh_r0MPa155wVVVHPCf3Wz2TBBU63TKxdFSWBwiAMFxMd8RFVSHy8xGFuLyhp7fK56i7wG0CmxVQg; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.cloudflare.com; Expires=Fri, 06 Nov 2026 09:06:00 GMT
set-cookiekndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiYxNDIwNDAwNjI0NzM5MzAwOTk5ODA1NjAyOTY1NDk2ODcyNDM2MFIOCP2-gICbNCoDVkE2MALwAf2-gICbNA==; Expires=Mon, 06 Dec 2027 08:36:00 GMT; Path=/; Secure; SameSite=Lax
set-cookiecfz_adobe={"MsVJ_ecid":{"v":"CiYxNDIwNDAwNjI0NzM5MzAwOTk5ODA1NjAyOTY1NDk2ODcyNDM2MFIOCP2-gICbNCoDVkE2MALwAf2-gICbNA==","e":1828082160518}}; Expires=Mon Dec 06 2027 08:36:00 GMT+0000 (Coordinated Universal Time); HttpOnly; SameSite=Lax; Path=/; Secure
set-cookiecfz_google-analytics_v4={"nzcr_ga4":{"v":"61be3b1c-e826-4488-ad21-761a296df0ee","e":1828082160488}}; Expires=Mon Dec 06 2027 08:36:00 GMT+0000 (Coordinated Universal Time); HttpOnly; SameSite=Lax; Path=/; Secure
set-cookie_ga=GA1.1.61be3b1c-e826-4488-ad21-761a296df0ee; Expires=Mon, 06 Dec 2027 08:36:00 GMT; Path=/
strict-transport-securitymax-age=31536000; includeSubDomains
varyaccept-encoding
x-content-type-optionsnosniff
x-frame-optionsSAMEORIGIN
x-rmGW
x-served-bymarketing-site
x-xss-protection1; mode=block

Security headers

✓ Set Strict-Transport-Security
Forces HTTPS on future visits.
✓ Set Content-Security-Policy
Limits where scripts and other content can load from.
✓ Set X-Content-Type-Options
Stops browsers guessing file types (should be “nosniff”).
✓ Set X-Frame-Options
Stops other sites framing this page (or use CSP frame-ancestors).
✓ Set Referrer-Policy
Controls how much of the URL is shared with other sites.
✓ Set Permissions-Policy
Restricts access to camera, microphone, location and similar.
URLs are fetched from Cloudflare’s network with a plain GET, one hop at a time, without following JavaScript or meta refreshes. Terminal: curl "…/headers?q=example.com"