May we count visits with Google Analytics? It sets cookies and sends usage data to Google. Nothing loads unless you allow it. Cookie details
HTTP Headers of files.plugins.realtime.cloudflare.com: Response & Security Headers | OrbitProbe
files.plugins.realtime.cloudflare.comObserved: Oct 11, 2026, 05:37 AM UTCPage: https://www.orbitprobe.com/http-headers/files.plugins.realtime.cloudflare.com
HTTP headers of files.plugins.realtime.cloudflare.com
Opens the print dialog of your browser. Choose "Save as PDF" as the printer there to get a file: the browser writes it, nothing is uploaded.
Share a snapshot of this report
A live report changes with every lookup, so a shared link to it would not show what you see now. A snapshot stores this report as our server observed it and gives it its own link for 30 days. It holds public lookup data only. Anyone with the link can open it; search engines are asked not to index it.
Security headers
strict-transport-security
Missing
content-security-policy
Missing
x-content-type-options
Missing
x-frame-options
Not set (optional)
referrer-policy
Not set (optional)
permissions-policy
Not set (optional)
This is a presence check on one response. A present header does not prove its policy is strict, and other pages of the site may answer differently.
LiveSource: Direct HTTPS request (headers + first 64 KB of HTML)Observed:
Results are fetched live. DNS answers may come from a resolver cache for up to the TTL shown.
Change history
What this tool shows
OrbitProbe requests the home page over HTTPS, follows redirects and lists the headers of the final response exactly as the server sent them. Headers are how a server tells browsers and caches what to do: how long to keep a copy, whether the page may be framed, which scripts may run, and that the site must only be reached over HTTPS.
Cookie values are never displayed. A Set-Cookie header can carry a session identifier, so only the cookie name and its attributes (Secure, HttpOnly, SameSite, expiry) are shown. Those attributes are the part worth reviewing anyway.
What this service recorded for this name on earlier checks. A check happens only when someone opens a report or calls the API: nothing is scheduled, so gaps between checks are normal.
2 checks since Oct 11, 2026, the latest on Oct 11, 2026.
Changes observed
No change in the recorded values across 2 checks.
Values on record
Certificate issuer
Google Trust Services · WE1
unchanged since Oct 11, 2026, seen in 1 check · Source: Direct HTTPS request (headers + first 64 KB of HTML) · Observed:
Certificate expiry
2026-11-12
unchanged since Oct 11, 2026, seen in 1 check · Source: Direct HTTPS request (headers + first 64 KB of HTML) · Observed:
The history is kept for the domain name only; nothing about who looked it up is stored. Entries not seen again for 400 days are deleted. Changing A, AAAA and hosting values are normal for sites behind load balancers or content delivery networks.
How this domain compares
Fixed points of reference, not rankings. Each line says what the value is compared with and where it came from.
Certificate lifetime 90 days, 32 days remaining. Publicly trusted certificates issued on this date may be valid for at most 200 days (CA/Browser Forum Baseline Requirements).Source: Direct HTTPS request (headers + first 64 KB of HTML) · Observed:
