HTTP Headers
Show the HTTP headers for a URL, with a full break-down of details. Will follow redirects.
Summary
- Response
- Total Requests
- 1
- Total Time
- 336 ms
https://peatix.com/user/21413642
- Status
- 403
- Message
- Forbidden
- Time
- 336 ms
- IP
- 18.164.116.44
Timing
Wait
0 ms
DNS
13 ms
TCP
2 ms
Request
1 ms
First Byte
315 ms
Download
1 ms
Total
336 ms
HTTP Headers
- Content-Type
text/html
The MIME type of this content.
Type
text/html
Description
HTML file
- Content-Length
520
The length of the response body in octets (8-bit bytes).
- Connection
close
Control options for the current connection and list of hop-by-hop response fields.
close - The client or server would like to close the connection.
- Server
awselb/2.0
A name for the server.
Server
awselb
Description of the server software.
Version
2.0
Version number.
- Date
Mon, 31 Mar 2025 23:07:36 GMT
The date and time that the message was sent.
- X-Cache
Error from cloudfront
Indicates whether a cache was used to server this response.
- Via
1.1 2f276f8b7ce92ba7a0844268d20c32ba.cloudfront.net (CloudFront)
Added by proxies to track a request through proxies and to avoid loops.
Version
1.1
Protocol version.
Host
Host name.
- X-Amz-Cf-Pop
JFK50-P6
- Alt-Svc
h3=":443"; ma=86400
Indicate a resource should be loaded from a different server while still appearing to be loaded from this server.
Service
- h3 - :443
Service
- ma - 86400 (1 day)
Max age for the alternative (seconds).
- ma - 86400 (1 day)
- X-Amz-Cf-Id
rhfJWn-fw6AjCmJeHP7qC1hH075s31_uN8vjTOgmbaTs4OVZJ1zLYA==
- X-Xss-Protection
1; mode=block
Cross-site scripting (XSS) filter.
1
Enable XSS filtering.
Mode
Filtering mode.
- block - Block page if XSS is detected.
- Referrer-Policy
strict-origin-when-cross-origin
Controls what referrer information is sent with requests.
strict-origin-when-cross-origin - Send the full referrer for a same origin request. Send the origin only for cross-domain requests where the protocol level is the same. Otherwise do not send the referrer.
- X-Content-Type-Options
nosniff
Prevents Internet Explorer from MIME-sniffing a response away from the declared content-type.
nosniff - Block requests if type 'style' or 'script'.
- Strict-Transport-Security
max-age=31536000; includeSubDomains; preload
A HSTS Policy informing the HTTP client how long to cache the HTTPS only policy and whether this applies to subdomains.
Max-Age
31536000 (1 year)
The time a browser should remember a site can only be accessed with https (seconds).
includesubdomains
max-age applies to subdomains as well.
preload
Use Google's preloading strict transport security.
- Link
<https://cdn.peatix.com>; rel="preconnect"; crossorigin
Used to express a typed relationship with another resource.
Link
- rel - preconnect
- crossorigin