HTTP Response Headers Inspector

Check HTTP status codes (200, 301, 404), server technologies, compression, and security headers (CSP, HSTS).

📑

HTTP Response for threads.net

HTTP/1.1 200 OK
Header Field Value
Status HTTP/1.1 200 OK
Vary Accept-Encoding, Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
Location https://www.threads.net/
Strict-Transport-Security max-age=31536000; preload; includeSubDomains, max-age=31536000; preload; includeSubDomains
x-stack www, www
Content-Type text/html; charset="utf-8", text/html; charset="utf-8"
X-FB-Debug lvZUCa9xVMMoTPrD35uJlpdAKKDsakehpa5TttD5o0zP+11g05VINaWiY2+DFmcnkWPnqX+AVb1OjBrxpQI9rA==, qTCEA8VVTE+FnaUAl/BFq3WJeCx25IqGF7sReKG19v2shFSlr1qvvvUh2supP271uzFeEueEmUnjoE64iqkphw==
Date Tue, 06 Oct 2026 20:10:57 GMT, Tue, 06 Oct 2026 20:10:57 GMT
Alt-Svc h3=":443"; ma=86400, h3=":443"; ma=86400
X-FB-Connection-Quality EXCELLENT; q=0.9, rtt=28, rtx=0, c=14, mss=1380, tbw=3692, tp=-1, tpl=-1, uplat=235, ullat=0, EXCELLENT; q=0.9, rtt=23, rtx=0, c=14, mss=1380, tbw=3692, tp=-1, tpl=-1, uplat=322, ullat=0
Connection close, close
Content-Length 0
Set-Cookie csrftoken=_f4m7IKIjENNKRgzfzZ9hM; expires=Wed, 10-Nov-2027 20:10:57 GMT; Max-Age=34560000; path=/; domain=.threads.net; secure; SameSite=None
accept-ch-lifetime 4838400
accept-ch viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model
Pragma no-cache
Cache-Control private, no-cache, no-store, must-revalidate
Expires Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy default-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-iT5xwAlv' blob: 'self' static.cdninstagram.com 'wasm-unsafe-eval';style-src data: blob: 'unsafe-inline' *.fbcdn.net *.threads.com *.threads.net *.facebook.com *.instagram.com static.cdninstagram.com;connect-src *.threads.com *.threads.net wss://*.threads.com:* wss://*.threads.net:* *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* ws://localhost:* blob: *.instagram.com *.cdninstagram.com wss://*.instagram.com:* 'self';font-src data: static.cdninstagram.com;img-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net *.cdninstagram.com data: blob: about.fb.com agent.meta.ai engineering.fb.com *.fbsbx.com muse.ai android-webview-video-poster: pps.whatsapp.net *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https://www.gstatic.com;media-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net *.cdninstagram.com data: blob: *.fbsbx.com android-webview-video-poster: *.tenor.co *.tenor.com https://*.giphy.com https://www.gstatic.com;child-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net data: blob:;frame-src *.fbsbx.com *.facebook.net 'self';manifest-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net data: blob:;object-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net data: blob:;worker-src *.threads.com *.threads.net *.instagram.com *.facebook.com *.fbcdn.net data: blob:;block-all-mixed-content;upgrade-insecure-requests;
document-policy include-js-call-stacks-in-crash-reports
X-Frame-Options DENY
X-Content-Type-Options nosniff
X-XSS-Protection 0
reporting-endpoints coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.threads.com/ajax/barcelona_error_reports/?device_level=unknown&brsid=7693649896449572030&cpp=C3&cv=1049459221&st=1791317457909"
report-to {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.threads.com\/ajax\/barcelona_error_reports\/?device_level=unknown&brsid=7693649896449572030&cpp=C3&cv=1049459221&st=1791317457909"}]}
cross-origin-embedder-policy-report-only require-corp;report-to="coep_report"
cross-origin-opener-policy same-origin-allow-popups
origin-agent-cluster ?1