HTTP Response Headers Inspector

Check HTTP status codes (200, 301, 404), server technologies, compression, and security headers (CSP, HSTS).

📑

HTTP Response for forbesapp.com

HTTP/1.1 200 OK
Header Field Value
Status HTTP/1.1 200 OK
Date Wed, 07 Oct 2026 02:59:04 GMT, Wed, 07 Oct 2026 02:59:06 GMT
Content-Type text/html
Connection close, close
z-urlredirect-redirected-for 3103305785
Location https://www.forbes.com
Content-Length 774223
cache-control public, max-age=300
content-type text/html; charset=utf-8
server istio-envoy
x-envoy-upstream-service-time 2
x-malcolm A
backend dnsresolver
x-backend simple-site-prod
x-yourttl 300.000
x-cicero-cache HIT 3
X-Fastly-Backend 24YyrkkiTBhSwXWzJgvwW6--F_GCP_Cicero_Varnish
X-Fastly-X-is-US-DPA false
X-Fastly-X-is-OPT-IN-JURISDICTION false
X-Fastly-X-is-STRICT-US-DPA false
X-FastlyTTL 300.000
Accept-Ranges bytes
Age 2
Via 1.1 varnish
X-Served-By cache-del-vibw2260039-DEL
X-Cache MISS
X-Cache-Hits 0
X-Timer S1791341944.228689,VS0,VE2197
Vary Accept-Encoding, X-is-US-DPA, X-is-US, X-Device, canary, X-Is-Ad-Light, is-vwo-enabled, X-is-OPT-IN-JURISDICTION, X-is-STRICT-US-DPA, x-malcolm, x-malcolm, X-is-US-DPA, X-is-OPT-IN-JURISDICTION, X-is-STRICT-US-DPA, X-is-US, X-Device, x-backend, canary, X-Is-Ad-Light, is-vwo-enabled
X-Country-Code IN
X-Postal-Code 208020
X-Region UP
X-City-Code kanpur
Permissions-Policy unload=()
X-Frame-Options SAMEORIGIN
Content-Security-Policy upgrade-insecure-requests
Strict-Transport-Security max-age=31536000; includeSubDomains; preload
Access-Control-Allow-Credentials true
x-device pc
Set-Cookie VWO=92.400; Max-Age=34560000; Path=/;
is-vwo-enabled false
state MISS-CLUSTER
Referrer-Policy strict-origin-when-cross-origin
alt-svc h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400