HTTP Response Headers Inspector
Check HTTP status codes (200, 301, 404), server technologies, compression, and security headers (CSP, HSTS).
HTTP Response for forbes.com
HTTP/1.1 200 OK| Header Field | Value |
|---|---|
| Status | HTTP/1.1 200 OK |
| Connection | close, close |
| Content-Length | 0, 774093 |
| Server | Varnish |
| Retry-After | 0 |
| Location | https://www.forbes.com/ |
| Accept-Ranges | bytes, bytes |
| Date | Tue, 06 Oct 2026 23:05:27 GMT, Tue, 06 Oct 2026 23:05:29 GMT |
| Via | 1.1 varnish, 1.1 varnish |
| X-Served-By | cache-del-vibw2260026-DEL, cache-del-vibw2260035-DEL |
| X-Cache | HIT, MISS |
| X-Cache-Hits | 0, 0 |
| X-Timer | S1791327928.594616,VS0,VE0, S1791327928.770304,VS0,VE1387 |
| X-Country-Code | IN, IN |
| X-Postal-Code | 208020, 208020 |
| X-Region | UP, UP |
| X-City-Code | kanpur, kanpur |
| Permissions-Policy | unload=(), unload=() |
| X-Frame-Options | SAMEORIGIN, SAMEORIGIN |
| Content-Security-Policy | upgrade-insecure-requests, upgrade-insecure-requests |
| Strict-Transport-Security | max-age=31536000; includeSubDomains; preload, max-age=31536000; includeSubDomains; preload |
| Access-Control-Allow-Credentials | true, true |
| x-device | pc, pc |
| state | HIT-SYNTH, MISS-CLUSTER |
| Referrer-Policy | strict-origin-when-cross-origin, strict-origin-when-cross-origin |
| alt-svc | h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400, h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 |
| cache-control | public, max-age=300 |
| content-type | text/html; charset=utf-8 |
| server | istio-envoy |
| x-envoy-upstream-service-time | 4 |
| x-malcolm | F |
| backend | dnsresolver |
| x-backend | simple-site-prod-f |
| x-yourttl | 300.000 |
| x-cicero-cache | HIT 2 |
| X-Fastly-Backend | 24YyrkkiTBhSwXWzJgvwW6--F_GCP_Cicero_Varnish |
| X-Fastly-X-is-US-DPA | false |
| X-Fastly-X-is-OPT-IN-JURISDICTION | false |
| X-Fastly-X-is-STRICT-US-DPA | false |
| X-FastlyTTL | 300.000 |
| Age | 1 |
| Vary | Accept-Encoding, X-is-US-DPA, X-is-US, X-Device, canary, X-Is-Ad-Light, is-vwo-enabled, X-is-OPT-IN-JURISDICTION, X-is-STRICT-US-DPA, x-malcolm, x-malcolm, X-is-US-DPA, X-is-OPT-IN-JURISDICTION, X-is-STRICT-US-DPA, X-is-US, X-Device, x-backend, canary, X-Is-Ad-Light, is-vwo-enabled |
| Set-Cookie | VWO=21.600; Max-Age=34560000; Path=/; |
| is-vwo-enabled | false |