Reachability

How to read the response headers for a URL

You need server, cache, cookie, or security-header evidence without the body. Fetch them with HTTP Headers.

Ben Fidge · · 4 min read

Read status and final URL first, then the header list. A missing security header was not sent.
Status and final URL come first, then the header list, and a missing security header was not sent.

What to run

Use HTTP Headers. The result is from Cloudflare.

How to read the result

Status and final URL first. Then the header list.

Missing strict-transport-security, content-security-policy, or x-content-type-options means "not sent", not "invalid".

location on a 3xx is the next hop.

What to open next

If location is present, open Redirect Checker. That result is from Cloudflare.

If the status is unclear, open HTTP Status Codes. That page stays in the browser.

Analytics and ad cookies stay off until you accept

Accept lets Google Analytics and AdSense set cookies. Reject keeps them off. The tools work either way. Read the privacy page.