HTTP Response Headers Inspector
Check HTTP status codes (200, 301, 404), server technologies, compression, and security headers (CSP, HSTS).
HTTP Response for google.com
HTTP/1.1 200 OK| Header Field | Value |
|---|---|
| Status | HTTP/1.1 200 OK |
| Location | https://www.google.com/ |
| Content-Type | text/html; charset=UTF-8, text/html; charset=UTF-8 |
| Content-Security-Policy-Report-Only | object-src 'none';base-uri 'self';script-src 'nonce-3uTDwkZ6wmfaCLYlV92H7w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp, object-src 'none';base-uri 'self';script-src 'nonce-xpkcV3JBi4dld-uDZ7qwpQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp |
| Cross-Origin-Opener-Policy | same-origin-allow-popups; report-to="gws", same-origin-allow-popups; report-to="gws" |
| Report-To | {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}, {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} |
| Permissions-Policy | unload=(), unload=() |
| Date | Tue, 06 Oct 2026 22:09:01 GMT, Tue, 06 Oct 2026 22:09:01 GMT |
| Expires | Thu, 05 Nov 2026 22:09:01 GMT, Tue, 06 Oct 2026 22:09:01 GMT |
| Cache-Control | public, max-age=2592000, private |
| Server | gws, gws |
| Content-Length | 220 |
| X-XSS-Protection | 0, 0 |
| X-Frame-Options | SAMEORIGIN, SAMEORIGIN |
| Alt-Svc | h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 |
| Connection | close, close |
| Accept-CH | Sec-CH-Prefers-Color-Scheme, Downlink, RTT, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64 |
| P3P | CP="This is not a P3P policy! See g.co/p3phelp for more info." |
| Set-Cookie | __Secure-STRP=ABNhA6gObSb_BbvvDfxwG1wiUXpeDDSyLRBYLPhVSxh7j9-lmTIROML3bLhwPthcy1rVTDS-LCDp-c59SU2hHFs-VOoGqqnjpqFT; expires=Tue, 06-Oct-2026 22:14:01 GMT; path=/; domain=.google.com; Secure; SameSite=strict, SEARCH_SAMESITE=CgQI_KEB; expires=Sun, 04-Apr-2027 22:09:01 GMT; path=/; domain=.google.com; SameSite=strict, AEC=Aaa9EJqbK5wX5D44GgtBgRJd8HzitP6YTxFIpJHIHyY-MUJjz_D6_iQE5kM; expires=Sun, 04-Apr-2027 22:09:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax, NID=Cu4BCAESoAEBOxGDSE27hmr2awvPwvVasO9vxo8GIgMU_1zuFcGa_cG5gCt71vds1_IH2GyWKfZSWQVxYPT-6t5x48iz5dOiVYE9i_QN1o36fN6Em1kIqK7HOj54TePgDbTSnqsFqUFiV2wG10IKqmqfY1N1Wluw376Ws9Iuj3gJUIYyYsnjIb_zugfDaWxy7yeS24RvHLHx2ju6ItzjDC2X7MYvVvseKAEyRQHSrAfPsXwIF1LAtjz1LBIaWwMhcucP7sQ7vQGYfCjQ1Q7jM5x64KBwbl3dw8RvAC3HgxE7rvrJcTTt7-sg52PsPAesBw; expires=Wed, 07-Apr-2027 22:09:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none |
| Transfer-Encoding | chunked |