HTTP Response Headers Inspector

Check HTTP status codes (200, 301, 404), server technologies, compression, and security headers (CSP, HSTS).

📑

HTTP Response for cloudflare.com

HTTP/1.1 200 OK
Header Field Value
Status HTTP/1.1 200 OK
Date Tue, 06 Oct 2026 21:12:00 GMT, Tue, 06 Oct 2026 21:12:00 GMT
Content-Type text/html; charset=UTF-8, text/html; charset=utf-8
Connection close, close
Location https://www.cloudflare.com/
Strict-Transport-Security max-age=15780000; includeSubDomains, max-age=31536000; includeSubDomains
set-cookie __cf_bm=RCrDfzEZmI2s6wnpKBPeogRy.6KAKyLsjfHbSdH8DAI-1791321120.2109668-1.0.1.1-lolF7WPlq9DBQ86H06kBhv9dqLJD.3zujutdqmKrYxu0z18.QFNOLhANpicbg9hkpgt4wnR_8xTXEuyfqLeyhWm_tS2QrAyw53hRqlGWT8iKe3OgfUVrxZhIc_HJoVgR; HttpOnly; SameSite=None; Secure; Path=/; Domain=cloudflare.com; Expires=Tue, 06 Oct 2026 21:42:00 GMT, __cf_bm=sMd662UCynxwEh8N6xWGDbm6be0OOiVfKr5vNtQyCU4-1791321120.422502-1.0.1.1-OQFMcuOH8dMMDhURRDksoK1lK6TVOFrb8MWXn6cdz5j.4faB0XIbZeJhPb5Mf_EGmU4fFMYhIMkF39gDaPnU8OwLWLDi_gNaHbK3LmBpd2Mwzpr.ynd37nylRXM5nPo98WPGMK9XA..uLNY6FIk.Lg; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.cloudflare.com; Expires=Tue, 06 Oct 2026 21:42:00 GMT
Report-To {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=7BITZgFG0kKQbZhtqdIS9b6e0Jx5YzpEKz%2FPhAuA7v6R1Emem6dxxKy%2FqGQNWYf%2FVOX25Wc5C6bQRHASR9dXYwgpssj%2FL1Jn%2FuM1ZBaaInswtIkU%2FBPW%2BTrXmez5%2FrYU"}]}, {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1uxUenZ3m9FTL6fAm33L5FAuiK8cB38%2Feh7asXbhYqR7F9fU%2FSyaHkVc3e9dZb1vODTgVSPTJWW%2FkJs6f9yPJeCo13mqL%2FnSXjSAijJa1StFAWvTayIHgtFTw8UFUSAS6vfATQ%3D%3D"}]}
Nel {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}, {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server cloudflare, cloudflare
CF-RAY a467a9694c5b59e1-DEL, a467a96aaae34e7b-DEL
alt-svc h3=":443"; ma=86400, h3=":443"; ma=86400
Link <https://www.cloudflare.com/.well-known/api-catalog>; rel="api-catalog", <https://www.cloudflare.com/.well-known/agents.json>; rel="service-desc", <https://www.cloudflare.com/.well-known/webmcp.json>; rel="service-desc", <https://www.cloudflare.com/openapi.json>; rel="service-desc", <https://www.cloudflare.com/llms.txt>; rel="service-doc", <https://www.cloudflare.com/sitemap.xml>; rel="sitemap", </fonts/Kunst%20Grotesk%20Regular.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin, </fonts/Kunst%20Grotesk%20Medium.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin, <https://ot.www.cloudflare.com>; rel=preconnect; crossorigin, <https://imagedelivery.net>; rel=preconnect; crossorigin, </static/hero-poster.avif>; rel=preload; as=image; type="image/avif"; fetchpriority=high
Server-Timing cfEdge;dur=2,cfOrigin;dur=0,cfWorker;dur=222
Cache-Control no-store
Vary accept-encoding
Content-Security-Policy default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://static-staging.cloudflareinsights.com https://challenges.cloudflare.com https://*.onetrust.com https://cdn.cookielaw.org https://ot.www.cloudflare.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://adservice.google.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://platform.twitter.com https://static.ads-twitter.com https://scripts.demandbase.com https://tag.demandbase.com https://*.6sc.co https://*.qualified.com https://snap.licdn.com https://bat.bing.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.doubleclick.net https://www.googleadservices.com https://translate.googleapis.com https://cdn.bizible.com https://js.adsrvr.org https://*.marketo.net https://ads-twitter.com https://analytics.twitter.com https://*.twimg.com https://api.demandbase.com https://scripts.demandbase.com https://tag.demandbase.com https://tag-logger.demandbase.com https://api.company-target.com https://*.6sc.co https://epsilon.6sense.com https://*.qualified.com https://*.ads.linkedin.com https://www.linkedin.com https://bat.bing.com https: wss://*.qualified.com wss://*.registrar.cloudflare.com; frame-src https://*.adsrvr.org https://*.cloudflare.com https://*.videodelivery.net https://*.cloudflarestream.com https://www.googletagmanager.com https://*.qualified.com https://td.doubleclick.net https://bid.g.doubleclick.net https://9309168.fls.doubleclick.net https://9973066.fls.doubleclick.net https://s.company-target.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; worker-src 'self' blob:; child-src 'self' blob:; upgrade-insecure-requests
Cross-Origin-Opener-Policy unsafe-none
Cross-Origin-Resource-Policy cross-origin
Permissions-Policy geolocation=(), camera=(), microphone=()
Referrer-Policy strict-origin-when-cross-origin
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
X-Served-By marketing-site
X-XSS-Protection 1; mode=block
x-RM GW
Set-Cookie _ga=GA1.1.120e519c-08de-4bfa-99b9-6b66d70050d8; Expires=Sat, 06 Nov 2027 21:12:00 GMT; Path=/, cfz_google-analytics_v4={"nzcr_ga4":{"v":"120e519c-08de-4bfa-99b9-6b66d70050d8","e":1825535520428}}; Expires=Sat Nov 06 2027 21:12:00 GMT+0000 (Coordinated Universal Time); HttpOnly; SameSite=Lax; Path=/; Secure, cfz_adobe={"MsVJ_ecid":{"v":"CiY0MTE3MTkzNzIwNTkyNDczMTI2NDc4NDE3NTk0OTQ2MDIxOTg1MFIOCLm-vJiRNCoDVkE2MALwAbm-vJiRNA==","e":1825449120643}}; Expires=Fri Nov 05 2027 21:12:00 GMT+0000 (Coordinated Universal Time); HttpOnly; SameSite=Lax; Path=/; Secure, kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY0MTE3MTkzNzIwNTkyNDczMTI2NDc4NDE3NTk0OTQ2MDIxOTg1MFIOCLm-vJiRNCoDVkE2MALwAbm-vJiRNA==; Expires=Fri, 05 Nov 2027 21:12:00 GMT; Path=/; Secure; SameSite=Lax