HTTP Response Headers Inspector
Check HTTP status codes (200, 301, 404), server technologies, compression, and security headers (CSP, HSTS).
HTTP Response for whatsapp.com
HTTP/1.1 400 Bad Request| Header Field | Value |
|---|---|
| Status | HTTP/1.1 400 Bad Request |
| Location | https://www.whatsapp.com/ |
| Strict-Transport-Security | max-age=31536000; preload; includeSubDomains, max-age=31536000; preload; includeSubDomains |
| Content-Type | text/plain, text/html; charset="utf-8" |
| Server | proxygen-bolt |
| Date | Wed, 07 Oct 2026 02:59:31 GMT, Wed, 07 Oct 2026 02:59:31 GMT |
| X-FB-Connection-Quality | EXCELLENT; q=0.9, rtt=25, rtx=0, c=14, mss=1380, tbw=3383, tp=-1, tpl=-1, uplat=0, ullat=-1, EXCELLENT; q=0.9, rtt=25, rtx=0, c=14, mss=1380, tbw=3382, tp=-1, tpl=-1, uplat=228, ullat=0 |
| Alt-Svc | h3=":443"; ma=86400, h3=":443"; ma=86400 |
| Connection | close, close |
| Content-Length | 0, 6278 |
| Pragma | no-cache |
| Cache-Control | private, no-cache, no-store, must-revalidate |
| Expires | Sat, 01 Jan 2000 00:00:00 GMT |
| content-security-policy | default-src 'self' blob:;script-src *.whatsapp.com *.whatsapp.net *.facebook.com *.facebook.net 'nonce-cCBljj3L' 'self' blob:;style-src *.whatsapp.com *.whatsapp.net 'unsafe-inline' *.facebook.com 'self' data: blob:;connect-src *.whatsapp.com *.whatsapp.net wss://*.facebook.com:* *.fbcdn.net 'self' data: blob:;font-src *.whatsapp.com *.whatsapp.net *.facebook.com static.xx.fbcdn.net data:;img-src *.whatsapp.com *.whatsapp.net *.facebook.com *.fbcdn.net *.fbsbx.com static.xx.fbcdn.net *.cdninstagram.com 'self' data: blob:;media-src *.fbcdn.net 'self' data: blob:;child-src 'self' data: blob:;frame-src *.facebook.com *.whatsapp.com 'self' data: blob:;manifest-src 'self' data: blob:;object-src 'self' data: blob:;worker-src *.whatsapp.com *.whatsapp.net *.facebook.com *.facebook.net 'nonce-cCBljj3L' 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests; |
| document-policy | include-js-call-stacks-in-crash-reports |
| X-Frame-Options | DENY |
| X-Content-Type-Options | nosniff |
| X-XSS-Protection | 0 |
| reporting-endpoints | coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.whatsapp.com/whatsapp_browser_error_reports/?device_level=unknown&brsid=7693755182216047742&cpp=C3&cv=1049526812&st=1791341971817" |
| report-to | {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/?device_level=unknown&brsid=7693755182216047742&cpp=C3&cv=1049526812&st=1791341971817"}]} |
| cross-origin-embedder-policy-report-only | require-corp;report-to="coep_report" |
| cross-origin-opener-policy | same-origin-allow-popups |
| Vary | Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding |
| origin-agent-cluster | ?1 |
| X-FB-Debug | nhumCJuXyb4mdkBpN5wE5dL/GR3f4Dg0Vz+fmkwZixfEAmt04nkblRt+MNKYiiw9B0DM2de4/yzqUD4YgSNtdQ== |
| Proxy-Status | http_request_error; e_proxy="AcR_Y_sB6XJYus1fWvRC-2gLPXluSa0CfQ9-WbTi4xxsrG3FpjuI3FAk9rnlx98wD6nP-KjWQDVideCRhrp3"; e_fb_twtaskhandle="AcQB4zYjcVhznWQNSGmr7VLTzdB2YQxqrqef2RX2rehrsrMs4e5_gDTrXLWhzUDPIHNGkI3btS3k7jjzkxzh0JjOeXDcVeRcBkZdztOJjB8cH6o"; e_upip="AcTq49uLtGDkxW-TZYYiRgaI1F3ELhuWejAYv-LK018bIFvVtH_kUPIBS1kA4XdV9y1qcdLatbNNXXqnDNwnIdcyo6psFh4SKO90VnBnk2A"; e_fb_zone="AcSkU1JkDakCHPLcaRmwf7gj9BU10QTOTNBKo_voaZIJQN1wyLd-wxYlZiYcSRbA"; e_clientaddr="AcRHKIH45duVwR4ixuWzhCURqMDVlP8qQyxNQjT9ZDmQPC3Imp80Pji_Inw9A4v9kfP0UcMeGBWHfZKHGFZfdS_4gSrMG0U8Lp3gjQ-TEvEONNlQ5g"; e_fb_vipaddr="AcSy5nIU91dipSZc54NoGRDd9w94FXFR1phBm7SfdYNETeqy_lmykUjPVkOMsqUY34N0QlIW8fkKPPx8eXOk4nQKnJOWtRr33qEm_vzP", http_request_error; e_proxy="AcTBJ2nSGgqgp_H8cyC_qgbRsz1k0dLU42iAuqA5_l-OBjweZeQVqcl9TRBUCCRyhtYEAAkfjZzu3xLAAA"; e_fb_twtaskhandle="AcRqsA9yqavNSmX2kkT-k6wOueyM_zpqT8x9GCwUd-GUQ0KiyC5SMHnu3WhQuk2or42tzbfppuUQp0w6vvQ8wlrW7aPoAE6bOoco"; e_upip="AcSUcULIFZsjSyi1ODnHlIzmgSLbb7hFnJE1K-RZ8tZuPCmF1iDLOHbGubVZbhE8SMXeq71rpitVXWKKh2hWtX3cUO_cUTZSfMV9Q0PA"; e_fb_zone="AcR0_iJrRmiTRNFSQI6JoV_gO161QiC9kkU3pW_osYHwSkDfRGq6XpU3FtMVDQ"; e_clientaddr="AcQIaTB0er0km2V-pzOFyYaZEo1utcHD3-tjvIyOCpiXbK4rbGjouSQeG0xz303bet1GIyqlwE9PjM7NgqI"; e_fb_vipaddr="AcSM64O5SJ7ypTqHavfg6s7k89677KgYmFyR_BPtrAotDpdzDUJ256kPJn0kz1NJej04kFSZ" |