HTTP headers checker

{
  "url": "m.communication.github.com",
  "method": "GET",
  "finalUrl": "https://auth.services.adobe.com/en_US/deeplink.html?deeplink=ssofirst&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCampaign1%2FAdobeID%2Fcode%3Fredirect_uri%3Dhttps%253A%252F%252Fadobe.com%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=Campaign1&scope=AdobeID%2Cperson%2Csession%2Cadditional_info.projectedProductContext%2Cread_organizations%2Cadditional_info.user_image_url%2Cwrite_pc%2Caudiencemanager_api%2Copenid%2Ctriggers&relay=389fac13-7c11-49e4-89af-9cb1aed28315&locale=en_US&flow_type=code&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft%2Cline%2Ckakao&response_type=code&code_challenge_method=plain&redirect_uri=https%3A%2F%2Fadobe.com&use_ms_for_expiry=true",
  "status": 200,
  "ok": true,
  "hops": [
    {
      "url": "https://m.communication.github.com/",
      "status": 302,
      "headers": {
        "date": "Sun, 15 Nov 2026 20:36:42 GMT",
        "server": "Apache",
        "location": "https://m.communication.github.com/xtk/logon.jssp",
        "content-length": "233",
        "connection": "close",
        "content-type": "text/html; charset=iso-8859-1"
      },
      "ms": 364,
      "statusText": "Found",
      "location": "https://m.communication.github.com/xtk/logon.jssp",
      "ip": "52.251.114.96",
      "httpVersion": "1.1"
    },
    {
      "url": "https://m.communication.github.com/xtk/logon.jssp",
      "status": 302,
      "headers": {
        "date": "Sun, 15 Nov 2026 20:36:42 GMT",
        "server": "Apache",
        "x-ua-compatible": "IE=edge",
        "pragma": "no-cache",
        "cache-control": "no-cache",
        "connection": "close",
        "location": "https://adobeid-na1.services.adobe.com/ims/authorize/v1?client_id=Campaign1&scope=AdobeID%2Cperson%2Csession%2Cadditional_info.projectedProductContext%2Cread_organizations%2Cadditional_info.user_image_url%2Cwrite_pc%2Caudiencemanager_api%2Copenid%2Ctriggers&response_type=code&redirect_uri=https%3A%2F%2Fm.communication.github.com%2Fxtk%2Flogon.jssp",
        "content-length": "0",
        "x-xss-protection": "1; mode=block",
        "x-content-type-options": "nosniff",
        "strict-transport-security": "max-age=31536000",
        "x-robots-tag": "noindex",
        "content-type": "text/html; charset=utf-8"
      },
      "ms": 327,
      "statusText": "Found",
      "location": "https://adobeid-na1.services.adobe.com/ims/authorize/v1?client_id=Campaign1&scope=AdobeID%2Cperson%2Csession%2Cadditional_info.projectedProductContext%2Cread_organizations%2Cadditional_info.user_image_url%2Cwrite_pc%2Caudiencemanager_api%2Copenid%2Ctriggers&response_type=code&redirect_uri=https%3A%2F%2Fm.communication.github.com%2Fxtk%2Flogon.jssp",
      "ip": "52.251.114.96",
      "httpVersion": "1.1"
    },
    {
      "url": "https://adobeid-na1.services.adobe.com/ims/authorize/v1?client_id=Campaign1&scope=AdobeID%2Cperson%2Csession%2Cadditional_info.projectedProductContext%2Cread_organizations%2Cadditional_info.user_image_url%2Cwrite_pc%2Caudiencemanager_api%2Copenid%2Ctriggers&response_type=code&redirect_uri=https%3A%2F%2Fm.communication.github.com%2Fxtk%2Flogon.jssp",
      "status": 302,
      "headers": {
        "date": "Sun, 15 Nov 2026 20:36:43 GMT",
        "content-type": "text/html;charset=UTF-8",
        "transfer-encoding": "chunked",
        "connection": "close",
        "location": "https://auth.services.adobe.com/en_US/deeplink.html?deeplink=ssofirst&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCampaign1%2FAdobeID%2Fcode%3Fredirect_uri%3Dhttps%253A%252F%252Fadobe.com%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=Campaign1&scope=AdobeID%2Cperson%2Csession%2Cadditional_info.projectedProductContext%2Cread_organizations%2Cadditional_info.user_image_url%2Cwrite_pc%2Caudiencemanager_api%2Copenid%2Ctriggers&relay=389fac13-7c11-49e4-89af-9cb1aed28315&locale=en_US&flow_type=code&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft%2Cline%2Ckakao&response_type=code&code_challenge_method=plain&redirect_uri=https%3A%2F%2Fadobe.com&use_ms_for_expiry=true",
        "cf-ray": "a5b10cb89c6e545d-CDG",
        "cf-cache-status": "DYNAMIC",
        "cache-control": "no-store",
        "content-language": "en",
        "server": "cloudflare",
        "set-cookie": "relay=389fac13-7c11-49e4-89af-9cb1aed28315; Path=/; Secure; SameSite=None\nftrset=819; Path=/; Secure; HttpOnly; SameSite=None\nftrset=819; Path=/; Secure; HttpOnly; SameSite=None",
        "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
        "cross-origin-embedder-policy": "require-corp",
        "cross-origin-resource-policy": "same-site",
        "p3p": "CP=\"IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA\"",
        "x-debug-id": "389fac13-7c11-49e4-89af-9cb1aed28315",
        "x-via": "glbs-va6c2,glbs-irl1"
      },
      "ms": 175,
      "statusText": "Found",
      "location": "https://auth.services.adobe.com/en_US/deeplink.html?deeplink=ssofirst&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCampaign1%2FAdobeID%2Fcode%3Fredirect_uri%3Dhttps%253A%252F%252Fadobe.com%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=Campaign1&scope=AdobeID%2Cperson%2Csession%2Cadditional_info.projectedProductContext%2Cread_organizations%2Cadditional_info.user_image_url%2Cwrite_pc%2Caudiencemanager_api%2Copenid%2Ctriggers&relay=389fac13-7c11-49e4-89af-9cb1aed28315&locale=en_US&flow_type=code&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft%2Cline%2Ckakao&response_type=code&code_challenge_method=plain&redirect_uri=https%3A%2F%2Fadobe.com&use_ms_for_expiry=true",
      "ip": "162.159.140.165",
      "httpVersion": "1.1"
    },
    {
      "url": "https://auth.services.adobe.com/en_US/deeplink.html?deeplink=ssofirst&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCampaign1%2FAdobeID%2Fcode%3Fredirect_uri%3Dhttps%253A%252F%252Fadobe.com%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=Campaign1&scope=AdobeID%2Cperson%2Csession%2Cadditional_info.projectedProductContext%2Cread_organizations%2Cadditional_info.user_image_url%2Cwrite_pc%2Caudiencemanager_api%2Copenid%2Ctriggers&relay=389fac13-7c11-49e4-89af-9cb1aed28315&locale=en_US&flow_type=code&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft%2Cline%2Ckakao&response_type=code&code_challenge_method=plain&redirect_uri=https%3A%2F%2Fadobe.com&use_ms_for_expiry=true",
      "status": 200,
      "headers": {
        "date": "Sun, 15 Nov 2026 20:36:43 GMT",
        "content-type": "text/html",
        "transfer-encoding": "chunked",
        "connection": "close",
        "server": "cloudflare",
        "last-modified": "Wed, 04 Nov 2026 10:18:33 GMT",
        "x-amz-storage-class": "INTELLIGENT_TIERING",
        "x-amz-version-id": "JbpK_fZq8zO99XpdF4ioqpPn0IMkcNQM",
        "x-amz-server-side-encryption": "AES256",
        "cache-control": "max-age=30,stale-while-revalidate=5",
        "etag": "W/\"9acd56fd6235a95f3ca31dc7b5fe5a4a\"",
        "vary": "Accept-Encoding",
        "x-cache": "Hit from cloudfront",
        "via": "1.1 5a846dcecbd8f1da6a7cd974344e91fa.cloudfront.net (CloudFront)",
        "x-amz-cf-pop": "CDG50-P6",
        "alt-svc": "h3=\":443\"; ma=86400",
        "x-amz-cf-id": "-IjpPDx0wHpMQKSLBHnNnIxQ8v0zeXJlU15R9XraIW5t1UFz7TgdzQ==",
        "age": "20",
        "x-frame-options": "DENY",
        "referrer-policy": "no-referrer-when-downgrade",
        "content-security-policy": "report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to report_api",
        "x-content-type-options": "nosniff",
        "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
        "cross-origin-opener-policy-report-only": "restrict-properties; report-to=\"report_api\"",
        "report-to": "{\"group\":\"report_api\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://auth.services.adobe.com/signin/v1/audit/report\"}]}",
        "reporting-endpoints": "report_api=\"https://auth.services.adobe.com/signin/v1/audit/report\"",
        "x-robots-tag": "noindex",
        "cf-cache-status": "DYNAMIC",
        "content-encoding": "br",
        "cf-ray": "a5b10cb9aba93b9c-CDG"
      },
      "ms": 70,
      "statusText": "OK",
      "ip": "172.64.155.179",
      "httpVersion": "1.1"
    }
  ],
  "totalMs": 937,
  "redirects": {
    "count": 3,
    "loop": false,
    "tooMany": false,
    "notFollowed": false,
    "httpsUpgrade": false,
    "downgrade": false,
    "crossDomain": true,
    "chain": [
      {
        "from": "https://m.communication.github.com/",
        "to": "https://m.communication.github.com/xtk/logon.jssp",
        "status": 302
      },
      {
        "from": "https://m.communication.github.com/xtk/logon.jssp",
        "to": "https://adobeid-na1.services.adobe.com/ims/authorize/v1?client_id=Campaign1&scope=AdobeID%2Cperson%2Csession%2Cadditional_info.projectedProductContext%2Cread_organizations%2Cadditional_info.user_image_url%2Cwrite_pc%2Caudiencemanager_api%2Copenid%2Ctriggers&response_type=code&redirect_uri=https%3A%2F%2Fm.communication.github.com%2Fxtk%2Flogon.jssp",
        "status": 302
      },
      {
        "from": "https://adobeid-na1.services.adobe.com/ims/authorize/v1?client_id=Campaign1&scope=AdobeID%2Cperson%2Csession%2Cadditional_info.projectedProductContext%2Cread_organizations%2Cadditional_info.user_image_url%2Cwrite_pc%2Caudiencemanager_api%2Copenid%2Ctriggers&response_type=code&redirect_uri=https%3A%2F%2Fm.communication.github.com%2Fxtk%2Flogon.jssp",
        "to": "https://auth.services.adobe.com/en_US/deeplink.html?deeplink=ssofirst&callback=https%3A%2F%2Fims-na1.adobelogin.com%2Fims%2Fadobeid%2FCampaign1%2FAdobeID%2Fcode%3Fredirect_uri%3Dhttps%253A%252F%252Fadobe.com%26code_challenge_method%3Dplain%26use_ms_for_expiry%3Dtrue&client_id=Campaign1&scope=AdobeID%2Cperson%2Csession%2Cadditional_info.projectedProductContext%2Cread_organizations%2Cadditional_info.user_image_url%2Cwrite_pc%2Caudiencemanager_api%2Copenid%2Ctriggers&relay=389fac13-7c11-49e4-89af-9cb1aed28315&locale=en_US&flow_type=code&idp_flow_type=login&s_p=google%2Cfacebook%2Capple%2Cmicrosoft%2Cline%2Ckakao&response_type=code&code_challenge_method=plain&redirect_uri=https%3A%2F%2Fadobe.com&use_ms_for_expiry=true",
        "status": 302
      }
    ]
  },
  "security": {
    "score": 76,
    "grade": "B",
    "checks": [
      {
        "id": "hsts",
        "header": "Strict-Transport-Security",
        "weight": 25,
        "present": true,
        "value": "max-age=31536000; includeSubDomains; preload",
        "rating": "good",
        "message": "HSTS is enabled for 365 days. includeSubDomains and preload are set: the site can be added to browsers' preload lists."
      },
      {
        "id": "csp",
        "header": "Content-Security-Policy",
        "weight": 30,
        "present": true,
        "value": "report-uri https://auth.services.adobe.com/signin/v1/audit/csp-violation-report; report-to report_api",
        "rating": "ok",
        "message": "A Content-Security-Policy is set, but it does not restrict scripts (no script-src or default-src)."
      },
      {
        "id": "frame-options",
        "header": "X-Frame-Options",
        "weight": 15,
        "present": true,
        "value": "DENY",
        "rating": "good",
        "message": "Framing is limited (DENY), which blocks clickjacking."
      },
      {
        "id": "content-type-options",
        "header": "X-Content-Type-Options",
        "weight": 15,
        "present": true,
        "value": "nosniff",
        "rating": "good",
        "message": "MIME sniffing is disabled."
      },
      {
        "id": "referrer-policy",
        "header": "Referrer-Policy",
        "weight": 10,
        "present": true,
        "value": "no-referrer-when-downgrade",
        "rating": "weak",
        "message": "no-referrer-when-downgrade sends the full URL (path and query) to other sites."
      },
      {
        "id": "permissions-policy",
        "header": "Permissions-Policy",
        "weight": 5,
        "present": false,
        "rating": "missing",
        "message": "No Permissions-Policy: powerful browser features stay available to any embedded content."
      }
    ]
  },
  "caching": {
    "noStore": false,
    "noCache": false,
    "private": false,
    "public": false,
    "immutable": false,
    "mustRevalidate": false,
    "cacheability": "cacheable",
    "summary": "Cacheable for 30 seconds.",
    "cacheControl": "max-age=30,stale-while-revalidate=5",
    "maxAge": 30,
    "staleWhileRevalidate": 5,
    "etag": true,
    "lastModified": "Wed, 04 Nov 2026 10:18:33 GMT",
    "age": 20,
    "vary": "Accept-Encoding",
    "cdnStatus": "cf-cache-status: DYNAMIC"
  },
  "cookies": [],
  "server": {
    "versionDisclosed": false,
    "software": "cloudflare",
    "via": "1.1 5a846dcecbd8f1da6a7cd974344e91fa.cloudfront.net (CloudFront)",
    "cdn": "Cloudflare"
  },
  "content": {
    "type": "text/html",
    "encoding": "br"
  },
  "issues": [
    {
      "severity": "info",
      "code": "CROSS_DOMAIN_REDIRECT",
      "message": "The chain leaves the original registrable domain."
    }
  ],
  "notes": [],
  "statusText": "OK"
}