HTTP Headers
Show the HTTP headers for a URL, with a full break-down of details. Will follow redirects.
Summary
- Response
- Total Requests
- 1
- Total Time
- 433 ms
https://trust-seo.com/
- Status
- 200
- Message
- OK
- Time
- 433 ms
- IP
- 45.88.76.191
Timing
Wait
0 ms
DNS
158 ms
TCP
88 ms
Request
0 ms
First Byte
95 ms
Download
0 ms
Total
433 ms
HTTP Headers
- Server
nginx
A name for the server.
nginx - Description of the server software.
- Date
Tue, 01 Jul 2025 18:16:21 GMT
The date and time that the message was sent.
- Content-Type
text/html; charset=UTF-8
The MIME type of this content.
Type
text/html
Description
HTML file
Charset
UTF-8
- Connection
close
Control options for the current connection and list of hop-by-hop response fields.
close - The client or server would like to close the connection.
- Vary
Accept-Encoding
Indicates that different content may be provided to different clients, depending on the vary header.
Headers
- Accept-Encoding
- Vary
Accept-Encoding
Indicates that different content may be provided to different clients, depending on the vary header.
Headers
- Accept-Encoding
Problems were detected with this header
- Duplicate header. There is another header with this name and this may cause problems.
- Set-Cookie
PHPSESSID=a1d44d1fe5bc31540c48a72c08c76adc; path=/
A cookie sent from the server to be set on the client
PHPSESSID
a1d44d1fe5bc31540c48a72c08c76adc
Cookie name and value.
Path
/
The client will only send the cookie when requesting this path, or subdirectories, from the server.
- Expires
Thu, 19 Nov 1981 08:52:00 GMT
The time at which the response is considered stale.
- Cache-Control
no-store, no-cache, must-revalidate
Inform all caching mechanisms from server to client whether they may cache this object.
no-store
May not be stored by any cache.
no-cache
May be stored by any cache but must be validated by the server.
must-revalidate
Stale caches must not be used.
- Pragma
no-cache
HTTP/1.0 backwards compatible cache handling.
no-cache - Force requests to the origin server before releasing a cache.
- X-Frame-Options
SAMEORIGIN
Clickjacking protection.
SAMEORIGIN - No rendering if origin mismatch.
- X-Content-Type-Options
nosniff
Prevents Internet Explorer from MIME-sniffing a response away from the declared content-type.
nosniff - Block requests if type 'style' or 'script'.
- X-Xss-Protection
1; mode=block
Cross-site scripting (XSS) filter.
1
Enable XSS filtering.
Mode
Filtering mode.
- block - Block page if XSS is detected.
- X-Permitted-Cross-Domain-Policies
master-only
Specifies if a cross-domain policy is allowed.
master-only
Problems were found.
- Option is not one of known values.
- Referrer-Policy
same-origin
Controls what referrer information is sent with requests.
same-origin - Send the full referrer for same origin requests, and nothing for cross-origin.
- Alt-Svc
h3=":443"; ma=86400
Indicate a resource should be loaded from a different server while still appearing to be loaded from this server.
Service
- h3 - :443
Service
- ma - 86400 (1 day)
Max age for the alternative (seconds).
- ma - 86400 (1 day)