HTTP Headers
Show the HTTP headers for a URL, with a full break-down of details. Will follow redirects.
Summary
- Response
- Total Requests
- 1
- Total Time
- 5348 ms
https://ste-b2b.agency/- Status
- 200
- Message
- OK
- Time
- 5348 ms
- IP
- 149.5.1.183
Timing
Wait
0 ms
DNS
21 ms
TCP
79 ms
Request
0 ms
First Byte
5169 ms
Download
0 ms
Total
5348 ms
HTTP Headers
- Server
nginx
A name for the server.
nginx - Description of the server software.
- Date
Fri, 13 Nov 2026 09:14:37 GMT
The date and time that the message was sent.
- Content-Type
text/html; charset=UTF-8
The MIME type of this content.
Problems were detected with this header
- Unknown MIME type.
- Connection
keep-alive
Control options for the current connection and list of hop-by-hop response fields.
keep-alive - The client would like to keep the connection open.
- Cf-Edge-Cache
cache,platform=wordpress
- X-Content-Type-Options
nosniff
Prevents Internet Explorer from MIME-sniffing a response away from the declared content-type.
nosniff - Block requests if type 'style' or 'script'.
- X-Xss-Protection
1; mode=block
Cross-site scripting (XSS) filter.
1
Enable XSS filtering.
Mode
Filtering mode.
- block - Block page if XSS is detected.
- Link
<https://cdn.gtranslate.net/>; rel=dns-prefetch, <https://ste-b2b.agency/wp-json/>; rel="https://api.w.org/", <https://ste-b2b.agency/wp-json/wp/v2/pages/3890>; rel="alternate"; title="JSON"; type="application/json", <https://ste-b2b.agency/>; rel=shortlink
Used to express a typed relationship with another resource.
Link
- rel - dns-prefetch
Link
https://ste-b2b.agency/wp-json/
- rel - https://api.w.org/
Link
https://ste-b2b.agency/wp-json/wp/v2/pages/3890
- rel - alternate
- title - JSON
- type - application/json
Link
- rel - shortlink
- Permissions-Policy
private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
Enable and disable browser features.
private-state-token-redemption
Problems were found.
- Unknown option
- (self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com") - Allowed on this page and all nested contexts in the same origin.
- "https://www.google.com" - Allowed on this origin.
- "https://www.gstatic.com" - Allowed on this origin.
- "https://recaptcha.net" - Allowed on this origin.
- "https://challenges.cloudflare.com" - Allowed on this origin.
- "https://hcaptcha.com" - Allowed on this origin.
private-state-token-issuance
Problems were found.
- Unknown option
- (self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com") - Allowed on this page and all nested contexts in the same origin.
- "https://www.google.com" - Allowed on this origin.
- "https://www.gstatic.com" - Allowed on this origin.
- "https://recaptcha.net" - Allowed on this origin.
- "https://challenges.cloudflare.com" - Allowed on this origin.
- "https://hcaptcha.com" - Allowed on this origin.
- Set-Cookie
cbxuseronline-cookie=wpuseronlineguest-797559; expires=Sun, 13 Dec 2026 09:14:32 GMT; Max-Age=2591998; path=/
A cookie sent from the server to be set on the client
cbxuseronline-cookie
wpuseronlineguest-797559
Cookie name and value.
Expires
Sun, 13 Dec 2026 09:14:32 GMT
When the cookie should expire.
Max-Age
2591998 (29 days 23 hours 59 minutes 58 seconds)
Number of seconds until the cookie expires.
Path
/
The client will only send the cookie when requesting this path, or subdirectories, from the server.
- Vary
Accept-Encoding,User-Agent
Indicates that different content may be provided to different clients, depending on the vary header.
Headers
- Accept-Encoding
- User-Agent