Browsers do not send URLs alone — they attach HTTP headers describing device, language, and capabilities. Here is what your browser actually transmitted.
HTTP headers carry metadata before the body of each request. Servers read them first to accept or reject requests and to choose language, format, and caching behavior.
- **Host:** Target server domain name. - **Connection:** Whether to keep the socket alive (e.g., keep-alive). - **Accept-Encoding:** Compression formats supported (gzip, deflate, br). - **Accept-Language:** Preferred language (e.g., en-US). - **Referer:** Previous page URL that linked here.
Logged-in sessions work because browsers send Cookie headers with identity tokens. Servers should mark sensitive cookies HttpOnly, and you should log out or close the browser on shared PCs to clear session cookies.