Home > HTTP Server Header Checker > Test results

HTTP Server Header Checker
    Server IP : 146.75.121.124

    HTTP/1.1 200 OK

    Connection: keep-alive

    x-xss-protection: 1; mode=block

    x-content-type-options: nosniff

    x-debug-info: eyJyZXRyaWVzIjowfQ==

    x-platform-server: i-05c94e1a46a23384c

    x-platform-server: i-05c94e1a46a23384c

    pragma: cache

    content-type: text/html; charset=UTF-8

    content-security-policy: upgrade-insecure-requests;

    x-frame-options: SAMEORIGIN

    x-timer: S1768035914.491707,VS0,VE958

    traceresponse: 00-1889534bf97d4959384c10ea46aa502c-592b2823ea4f6cc9-01

    expires: Sun, 11 Jan 2026 09:05:14 GMT

    report-to: {"group":"report-endpoint","max_age":10886400,"endpoints":[{"url":"https:\/\/f11810e5-a37d-4a04-bc29-8ffba24771db.sansec.watch\/"}]}

    x-esi: 1

    content-security-policy-report-only: font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com https://www.gstatic.com *.klevu.com *.ksearchnet.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com platform.twitter.com *.cookiebot.com *.pixlee.co assets.braintreegateway.com *.dotdigital-pages.com *.dotdigital.com photos.pixlee.co webchat.dotdigital.com webchat.staging.dotdigital.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://www.googletagmanager.com/ c.paypal.com checkout.paypal.com pay.google.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com https://*.gstatic.com imgsct.cookiebot.com *.pinterest.com *.paypalobjects.com *.trackedlink.net wac.edgecastcdn.net *.pixlee.com *.klevu.com *.ksearchnet.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.googleapis.com https://*.gstatic.com js.klevu.com assets.pinterest.com platform.twitter.com connect.facebook.net *.googletagmanager.com consent.cookiebot.com unpkg.com consentcdn.cookiebot.com js-agent.newrelic.com assets.pixlee.com r1-t.trackedlink.net www.gstatic.com f.vimeocdn.com *.turnto.com *.paypal.com *.paypalobjects.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.pixlee.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.ksearchnet.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.pxlecdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.gstatic.com f.vimeocdn.com widgets.turnto.com *.turnto.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.klevu.com *.ksearchnet.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com assets.braintreegateway.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.klevu.com syndication.twitter.com consentcdn.cookiebot.com bam.nr-data.net vod-adaptive-ak.vimeocdn.com cdn-ws.turnto.com we.turnto.com *.google-analytics.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.turnto.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.ksearchnet.com api.addressy.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://inbound-analytics.pixlee.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bam.nr-data.net commerce.adobedc.net *.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://f11810e5-a37d-4a04-bc29-8ffba24771db.sansec.watch/; report-to report-endpoint;

    Accept-Ranges: bytes

    Age: 48893

    Date: Sat, 10 Jan 2026 22:40:08 GMT

    X-Served-By: cache-lhr-egll1980031-LHR, cache-lhr-egll1980031-LHR, cache-fra-etou8220075-FRA

    X-Cache: MISS, HIT, HIT

    X-Cache-Hits: 0, 639, 0

    Cache-Control: no-store, no-cache, must-revalidate, max-age=0

    Vary: Accept-Encoding,Cookie

    X-RateLimit-Counter: 2

    X-RateLimit-Reached: No

    Strict-Transport-Security: max-age=31557600



HTTP Header Checker

When you have a website, you’re responsible for making sure it is working properly. If your site is laggy or simply not loading, you could miss out on a ton of potential customers. If the URL and site aren’t working properly, you’ll need to test it to find out why.

But how do you get this information? One of the best ways to view and check the status of a website or server is to check the HTTP headers.

How to Check HTTP Headers

When running a campaign or working on your SEO, it is imperative that your links are not only accurate, but functional. Having a dead link or a server/request problem can be a huge roadblock to successful progress.

Solution? Make our HTTP server header checker part of your toolkit.

Our free header checker tool makes it incredibly quick and easy to check the server response for any URL. Simply paste your accurate URL into the blank field and click “Check Now”. Our HTTP status checker will instantly provide you with information including the status code, server, content type, requested page, keep-alive, caching headers, and any other headers being used. It’s our favorite tool for viewing your HTTP headers.

Using this information, you will be able to learn much more about a URL than you could with the naked eye. The right combination of headers can boost site performance, increase load times, and more. Our clean and simple interface was designed to make the process of viewing and checking headers quick and easy. Whether your site and its content are developed by PHP or another language, our headers checker tool will make sure you always know what’s going on behind the scenes.

What Are HTTP Headers?

HTTP headers are part of a website response that are normally hidden and can only be seen by a browser. They are a bit of code that informs the browser what it should do when viewing and/or opening the website. Essentially, they transfer data from a browser to the server and vice versa. These headers carry important information about the browser, the webpage, and the server itself.

In general, there are two different types of HTTP headers: the HTTP request header and the HTTP response header. The request header is sent to a server, which then sends back a response header.

HTTP Status Codes

While HTTP headers can help you see important information like software versions, content types, and cookie strings, the status codes are arguably the most important. An HTTP status code will quickly and easily tell you the status of a given website. A good and functional URL should always return with a response of 200 to show a successful request has been made.

In addition to 200, a few other common status codes include:

200 – The request has succeeded

301 – The requested resource has been assigned a new permanent URI and any future references to this resource SHOULD use one of the returned URIs.

302 – The requested resource resides temporarily under a different URI.

401 – The request requires user authentication.

404 – Not Found, he server has not found anything matching the Request-URI.

500 – Internal Server Error

503 – Service Unavailable,he server is currently unable to handle the request due to a temporary overloading or maintenance of the server.