HTTP Response Headers Inspector

Check HTTP status codes (200, 301, 404), server technologies, compression, and security headers (CSP, HSTS).

📑

HTTP Response for bitbucket.org

HTTP/1.1 200 OK
Header Field Value
Status HTTP/1.1 200 OK
Date Mon, 05 Oct 2026 13:21:45 GMT
Content-Type text/html;charset=UTF-8
Content-Length 178425
Server AtlassianEdge
Set-Cookie atlCohort={"bucketAll":{"bucketedAtUTC":"2026-10-05T13:21:45.638Z","version":"2","index":81,"bucketId":0}}; Max-Age=31536000; Domain=bitbucket.org; Path=/, ajs_anonymous_id=%225e1b1487-0f62-81bf-7e21-bdb66d171343%22; Max-Age=315360000; Domain=bitbucket.org; Path=/; Expires=Thu, 02 Oct 2036 13:21:45 GMT, bxp_gateway_request_id=83350000-de8e-d384-7108-839bfeb32f4b; Max-Age=300; Domain=bitbucket.org; Path=/; Expires=Mon, 05 Oct 2026 13:26:45 GMT; Secure
Cache-Control s-maxage=0, no-store, no-cache, must-revalidate
X-Magnolia-Registration Registered
Last-Modified Thu, 01 Oct 2026 16:31:08 GMT
X-Envoy-Attempt-Count 1
X-Frame-Options deny
Content-Security-Policy frame-ancestors 'none';
Vary Accept-Encoding, Referer
X-Content-Type-Options nosniff
X-Xss-Protection 1; mode=block
Atl-Traceid 8a27a91223e244458661951d5038c358
Atl-Request-Id 8a27a912-23e2-4445-8661-951d5038c358
Strict-Transport-Security max-age=63072000; includeSubDomains; preload
Report-To {"endpoints": [{"url": "https://dz8aopenkvv6s.cloudfront.net"}], "group": "endpoint-1", "include_subdomains": true, "max_age": 600}
Nel {"failure_fraction": 0.01, "include_subdomains": true, "max_age": 600, "report_to": "endpoint-1"}
Server-Timing atl-edge;dur=113,atl-edge-internal;dur=2,atl-edge-upstream;dur=111,atl-edge-pop;desc="aws-ap-south-1"
Connection close