HTTP Headers

Show the HTTP headers for a URL, with a full break-down of details. Will follow redirects.

Summary

Response
200
Total Requests
1
Total Time
289 ms
  • IP
    23.227.38.74
    View Map

  • Timing

    Wait

    0 ms

    DNS

    61 ms

    TCP

    2 ms

    Request

    0 ms

    First Byte

    216 ms

    Download

    1 ms

    Total

    289 ms

  • HTTP Headers

    Date

    Wed, 15 Oct 2025 14:32:39 GMT

    The date and time that the message was sent.

    Content-Type

    text/html; charset=utf-8

    The MIME type of this content.

    • Type

      text/html

    • Description

      HTML file

    • Charset

      utf-8

    Connection

    close

    Control options for the current connection and list of hop-by-hop response fields.

    close - The client or server would like to close the connection.

    Cf-Ray

    98f006eaaabf0cb2-EWR

    Encoded information about your request from Cloudflare.

    X-Sorting-Hat-Podid

    386

    X-Sorting-Hat-Shopid

    37038653572

    X-Storefront-Renderer-Rendered

    1

    Set-Cookie

    localization=GB; path=/; expires=Thu, 15 Oct 2026 14:32:38 GMT; SameSite=Lax

    A cookie sent from the server to be set on the client

    • localization

      GB

      Cookie name and value.

    • Path

      /

      The client will only send the cookie when requesting this path, or subdirectories, from the server.

    • Expires

      Thu, 15 Oct 2026 14:32:38 GMT

      When the cookie should expire.

    • Samesite

      Lax

      Cookie is not sent on cross-site requests but is when following a link to the origin.

    Set-Cookie

    _shopify_y=fd4453ef-608e-41c6-9ff5-70e4fcbef02a; domain=encasabotanics.co.uk; path=/; expires=Thu, 15 Oct 2026 20:32:38 GMT; SameSite=Lax

    A cookie sent from the server to be set on the client

    • _shopify_y

      fd4453ef-608e-41c6-9ff5-70e4fcbef02a

      Cookie name and value.

    • Domain

      encasabotanics.co.uk

      The client will only send the cookie when requesting from this domain.

    • Path

      /

      The client will only send the cookie when requesting this path, or subdirectories, from the server.

    • Expires

      Thu, 15 Oct 2026 20:32:38 GMT

      When the cookie should expire.

    • Samesite

      Lax

      Cookie is not sent on cross-site requests but is when following a link to the origin.

    Set-Cookie

    _shopify_s=b8713835-ba0e-4fd3-9da0-9d3d436c8286; domain=encasabotanics.co.uk; path=/; expires=Wed, 15 Oct 2025 15:02:38 GMT; SameSite=Lax

    A cookie sent from the server to be set on the client

    • _shopify_s

      b8713835-ba0e-4fd3-9da0-9d3d436c8286

      Cookie name and value.

    • Domain

      encasabotanics.co.uk

      The client will only send the cookie when requesting from this domain.

    • Path

      /

      The client will only send the cookie when requesting this path, or subdirectories, from the server.

    • Expires

      Wed, 15 Oct 2025 15:02:38 GMT

      When the cookie should expire.

    • Samesite

      Lax

      Cookie is not sent on cross-site requests but is when following a link to the origin.

    Set-Cookie

    _tracking_consent=3.AMPS_USNJ_f_t_qVuhrPQ9Qxu63g4gBYgzuQ; domain=encasabotanics.co.uk; path=/; expires=Thu, 15 Oct 2026 20:32:38 GMT; SameSite=Lax

    A cookie sent from the server to be set on the client

    • _tracking_consent

      3.AMPS_USNJ_f_t_qVuhrPQ9Qxu63g4gBYgzuQ

      Cookie name and value.

    • Domain

      encasabotanics.co.uk

      The client will only send the cookie when requesting from this domain.

    • Path

      /

      The client will only send the cookie when requesting this path, or subdirectories, from the server.

    • Expires

      Thu, 15 Oct 2026 20:32:38 GMT

      When the cookie should expire.

    • Samesite

      Lax

      Cookie is not sent on cross-site requests but is when following a link to the origin.

    Set-Cookie

    _shopify_essential=:AZnoSY7uAAEANzMkVedEo-PH-klPqcz3VhyGLd2N8uomQLltANQOxewHLXySONfvQbE7i8xmzjCkXbdf2kueePH5wsom510jSEScUELL8QEIFGL2xh1GI4Hu8MYNn9FPfDiw41GR046Fumaq8y9zCQ4MCw_33TyO0Xa1gE9k3E-7kAA3MINlTxYHGmAd5iotE-DH-KEog1AaR7DPF3Kl791niWkXde2vxeQuFI65s0KMNHaSrWYAHn1nQBQBsllcjqrTwuzVD499kSUGVkN7V8Lm:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax

    A cookie sent from the server to be set on the client

    • _shopify_essential

      :AZnoSY7uAAEANzMkVedEo-PH-klPqcz3VhyGLd2N8uomQLltANQOxewHLXySONfvQbE7i8xmzjCkXbdf2kueePH5wsom510jSEScUELL8QEIFGL2xh1GI4Hu8MYNn9FPfDiw41GR046Fumaq8y9zCQ4MCw_33TyO0Xa1gE9k3E-7kAA3MINlTxYHGmAd5iotE-DH-KEog1AaR7DPF3Kl791niWkXde2vxeQuFI65s0KMNHaSrWYAHn1nQBQBsllcjqrTwuzVD499kSUGVkN7V8Lm:

      Cookie name and value.

    • Max-Age

      31536000 (1 year)

      Number of seconds until the cookie expires.

    • Path

      /

      The client will only send the cookie when requesting this path, or subdirectories, from the server.

    • HttpOnly

      Prevents access to the cookie through JavaScript.

    • Secure

      The cookie is only sent when requesting from a https domain.

    • Priority

      High

    • Samesite

      Lax

      Cookie is not sent on cross-site requests but is when following a link to the origin.

    Set-Cookie

    _shopify_analytics=:AZnoSY9pAAEAiACAYLaxiH1NVsRE3u-qMMH_5KamNdifPgpNuEVpYI5uFEQvAtPCO1VQozs8D-ntisX_HD_xNPp0nk-Fx2Hmfw:; Max-Age=31536000; Path=/; HttpOnly; Secure; Priority=High; SameSite=Lax

    A cookie sent from the server to be set on the client

    • _shopify_analytics

      :AZnoSY9pAAEAiACAYLaxiH1NVsRE3u-qMMH_5KamNdifPgpNuEVpYI5uFEQvAtPCO1VQozs8D-ntisX_HD_xNPp0nk-Fx2Hmfw:

      Cookie name and value.

    • Max-Age

      31536000 (1 year)

      Number of seconds until the cookie expires.

    • Path

      /

      The client will only send the cookie when requesting this path, or subdirectories, from the server.

    • HttpOnly

      Prevents access to the cookie through JavaScript.

    • Secure

      The cookie is only sent when requesting from a https domain.

    • Priority

      High

    • Samesite

      Lax

      Cookie is not sent on cross-site requests but is when following a link to the origin.

    Link

    <https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossorigin

    Used to express a typed relationship with another resource.

    Speculation-Rules

    "/cdn/shopifycloud/storefront/assets/storefront/storefronts.specrules-dd5621a1.json"

    Etag

    W/"cacheable:b8e7ccd4b32b161a50d7bb9a369207da"

    An identifier for a specific version of a resource.

    • Validator

      weak

      A weak tag is easier to generate and prevents byte range caching.

    • Tag

      cacheable:b8e7ccd4b32b161a50d7bb9a369207da

    Shopify-Complexity-Score

    1250

    X-Frame-Options

    DENY

    Clickjacking protection.

    DENY - No rendering within frame.

    Content-Security-Policy

    block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;

    The content security policy allows the server to determine what resources the user is allowed to load.

    • block-all-mixed-content

      Prevent mixed content access.

    • Frame-Ancestors

      Define valid parents for frame, iframe, embed, object, and applet.

      • 'none'

    • upgrade-insecure-requests

      Treat insecure URLs as though they are secure.

    Strict-Transport-Security

    max-age=7889238

    A HSTS Policy informing the HTTP client how long to cache the HTTPS only policy and whether this applies to subdomains.

    • Max-Age

      7889238 (91 days 7 hours 27 minutes 18 seconds)

      The time a browser should remember a site can only be accessed with https (seconds).

    X-Shopid

    37038653572

    X-Shardid

    386

    Alt-Svc

    h3=":443"; ma=86400

    Indicate a resource should be loaded from a different server while still appearing to be loaded from this server.

    • Service

      • h3 - :443

    • Service

      • ma - 86400 (1 day)

        Max age for the alternative (seconds).

    Content-Language

    en-GB

    The natural language or languages of the intended audience for the enclosed content.

    en-GB - English

    Powered-By

    Shopify

    Server-Timing

    processing;dur=137;desc="gc:44", db;dur=35, db_async;dur=1.425, render;dur=18, asn;desc="14061", edge;desc="EWR", country;desc="US", theme;desc="97714864260", pageType;desc="page", servedBy;desc="8jwv", requestID;desc="25baf862-c47b-4a57-9c91-1f8b76935d4b-1760538758", _y;desc="fd4453ef-608e-41c6-9ff5-70e4fcbef02a", _s;desc="b8713835-ba0e-4fd3-9da0-9d3d436c8286", _cmp;desc="3.AMPS_USNJ_f_t_qVuhrPQ9Qxu63g4gBYgzuQ"

    Server metrics for the request.

    • Processing

      gc:44

      • dur - 137

    • Db

      • dur - 35

    • Db_async

      • dur - 1.425

    • Render

      • dur - 18

    • Asn

      14061

    • Edge

      EWR

    • Country

      US

    • Theme

      97714864260

    • Pagetype

      page

    • Servedby

      8jwv

    • Requestid

      25baf862-c47b-4a57-9c91-1f8b76935d4b-1760538758

    • _y

      fd4453ef-608e-41c6-9ff5-70e4fcbef02a

    • _s

      b8713835-ba0e-4fd3-9da0-9d3d436c8286

    • _cmp

      3.AMPS_USNJ_f_t_qVuhrPQ9Qxu63g4gBYgzuQ

    Server-Timing

    cfRequestDuration;dur=211.999893

    Server metrics for the request.

    • Cfrequestduration

      • dur - 211.999893
    X-Dc

    gcp-us-east1,gcp-us-east1,gcp-us-east1

    X-Request-Id

    25baf862-c47b-4a57-9c91-1f8b76935d4b-1760538758

    Cf-Cache-Status

    DYNAMIC

    Encoded information about your request from Cloudflare.

    DYNAMIC - This is not cached by default.

    Report-To

    {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1vgcXh6icyfS5Hc5QKSd%2B7Fe0rY1U0SvLoEUcFzKzqZtyxdDYkb0acjJ9tnpFYP0OGdrgW2h0IcM2p0jb8iuJvDn0z9QEf0ZdLbQmLTPXPjOfUv6%2FhB0uzjx2ML%2FVYaS1DXAUBCipo%2FfOA%3D%3D"}],"group":"cf-nel","max_age":604800}

    Report to.

    • Endpoints

      • {"url":"https://a.nel.cloudflare.com/report/v4?s=1vgcXh6icyfS5Hc5QKSd%2B7Fe0rY1U0SvLoEUcFzKzqZtyxdDYkb0acjJ9tnpFYP0OGdrgW2h0IcM2p0jb8iuJvDn0z9QEf0ZdLbQmLTPXPjOfUv6%2FhB0uzjx2ML%2FVYaS1DXAUBCipo%2FfOA%3D%3D"}

    • Group

      cf-nel

    • Max_age

      604800

    Nel

    {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}

    Configure network request logging.

    • Success_fraction

      0.01

    • Report_to

      cf-nel

    • Max_age

      604800

    X-Xss-Protection

    1; mode=block

    Cross-site scripting (XSS) filter.

    • 1

      Enable XSS filtering.

    • Mode

      Filtering mode.

      • block - Block page if XSS is detected.
    X-Content-Type-Options

    nosniff

    Prevents Internet Explorer from MIME-sniffing a response away from the declared content-type.

    nosniff - Block requests if type 'style' or 'script'.

    X-Permitted-Cross-Domain-Policies

    none

    Specifies if a cross-domain policy is allowed.

    none - No policy is allowed.

    X-Download-Options

    noopen

    Server

    cloudflare

    A name for the server.

    cloudflare - Description of the server software.