L7TESTER

Layer 7 Diagnostic Tool — PHP 8.3.29
Outbound URL Probe
Running L7 diagnostic…
Inbound Request (Your Session)
Your IP
216.73.216.138:19435
Protocol
HTTP/1.1
Server Time
2026-05-29 15:53:25 UTC

Request Details

▲
MethodGET
Hostl7tester.com
URI/
Full URLhttps://l7tester.com/
User-AgentMozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Accept-Encodinggzip, br, zstd, deflate
Accept-LanguageN/A
Server Hostname32ebaf9a9f20
X-Forwarded-For216.73.216.138:19435
TLS Cipher2048|256|CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US|CN=l7tester.com

Security Header Audit (This Server)

▲
HSTS
Enforces HTTPS connections
Suggested: strict-transport-security: max-age=31536000; includeSubDomains
MISSING
CSP
Controls resource loading to prevent XSS
Suggested: content-security-policy: default-src 'self'
MISSING
X-Frame-Options
Prevents clickjacking via iframes
Suggested: x-frame-options: DENY
MISSING
X-Content-Type-Options
Prevents MIME sniffing
Suggested: x-content-type-options: nosniff
MISSING
Referrer-Policy
Controls referrer information leakage
Suggested: referrer-policy: strict-origin-when-cross-origin
MISSING
Permissions-Policy
Controls browser feature access
Suggested: permissions-policy: geolocation=(), camera=(), microphone=()
MISSING
X-XSS-Protection
Legacy XSS filter (deprecated but still checked)
Suggested: x-xss-protection: 1; mode=block
MISSING

All Inbound Headers

▲