HTTP Response Headers Inspector
Check HTTP status codes (200, 301, 404), server technologies, compression, and security headers (CSP, HSTS).
HTTP Response for duckduckgo.com
HTTP/1.1 200 OK| Header Field | Value |
|---|---|
| Status | HTTP/1.1 200 OK |
| Server | nginx |
| Date | Wed, 07 Oct 2026 01:21:07 GMT |
| Content-Type | text/html; charset=UTF-8 |
| Content-Length | 345022 |
| Connection | close |
| Vary | Accept-Encoding |
| ETag | "6ac5030b-543be" |
| Strict-Transport-Security | max-age=31536000 |
| Permissions-Policy | interest-cohort=() |
| Content-Security-Policy | default-src 'none' ; connect-src https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src blob: data: https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duck.ai https://*.duck.ai https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ; |
| X-Frame-Options | SAMEORIGIN |
| X-XSS-Protection | 1;mode=block |
| X-Content-Type-Options | nosniff |
| Referrer-Policy | origin |
| Expect-CT | max-age=0 |
| NEL | {"report_to":"nel","max_age":86400,"failure_fraction":0.01} |
| Report-To | {"group":"nel","max_age":86400,"endpoints":[{"url":"https://use.nel.duckduckgo.com/v1/report?region=inc","priority":1,"weight":50},{"url":"https://euw.nel.duckduckgo.com/v1/report?region=inc","priority":1,"weight":50},{"url":"https://ase.nel.duckduckgo.com/v1/report?region=inc","priority":2}]} |
| Expires | Wed, 07 Oct 2026 01:21:06 GMT |
| Cache-Control | no-cache |
| Accept-Ranges | bytes |