HTTP Response Headers Inspector
Check HTTP status codes (200, 301, 404), server technologies, compression, and security headers (CSP, HSTS).
HTTP Response for apple.com
HTTP/1.1 200 OK| Header Field | Value |
|---|---|
| Status | HTTP/1.1 200 OK |
| Date | Tue, 06 Oct 2026 19:18:54 GMT, Tue, 06 Oct 2026 19:18:55 GMT |
| Connection | close, close |
| Via | http/1.1 inbom5-edge-bx-004.ts.apple.com (acdn/20.17688) |
| Cache-Control | no-store, max-age=154 |
| Location | https://www.apple.com/ |
| Content-Type | text/html, text/html; charset=utf-8 |
| Content-Language | en |
| X-Cache | none |
| CDNUUID | 7e4a5a02-90fa-4c20-a946-e6438260b9ee-4768492722 |
| Content-Length | 304 |
| Server | Apple |
| X-Frame-Options | SAMEORIGIN |
| X-Xss-Protection | 1; mode=block |
| X-Content-Type-Options | nosniff |
| Strict-Transport-Security | max-age=31536000; includeSubdomains; preload |
| Referrer-Policy | no-referrer-when-downgrade |
| Content-Security-Policy | default-src 'self' blob: data: *.akamaized.net *.apple.com *.apple-mapkit.com *.cdn-apple.com *.organicfruitapps.com; child-src blob: mailto: embed.music.apple.com embed.podcasts.apple.com https://recyclingprogram.apple.com https://smb.apple.com https://nova.apple.com swdlp.apple.com www.apple.com www.instagram.com platform.twitter.com www.youtube-nocookie.com; img-src 'unsafe-inline' blob: data: *.apple.com *.apple-mapkit.com *.cdn-apple.com *.mzstatic.com; script-src 'unsafe-inline' 'unsafe-eval' blob: *.apple.com *.apple-mapkit.com www.instagram.com platform.twitter.com; style-src 'unsafe-inline' *.apple.com |
| Expires | Tue, 06 Oct 2026 19:21:29 GMT |
| Set-Cookie | geo=IN; path=/; domain=.apple.com |