snag.page

Every check ยท Headers

Bot challenge

headers/challenge

What it checks

Whether Cloudflare answered with a bot challenge instead of the site.

Why it matters

A challenge page's headers aren't the site's, so they can't be judged.

How to fix it

  1. Let the user agent snag.page through in your Cloudflare security settings, so the site's own headers can be checked.

Check a site for this and everything else: snag.page. More on headers: Content-Security-Policy Framing nosniff Referrer policy Software versions End-of-life software CORS Permissions-Policy Cross-Origin-Opener-Policy