HTTP Response Headers Inspector
Check HTTP status codes (200, 301, 404), server technologies, compression, and security headers (CSP, HSTS).
HTTP Response for youtube.com
HTTP/1.1 200 OK| Header Field | Value |
|---|---|
| Status | HTTP/1.1 200 OK |
| Content-Type | application/binary, text/html; charset=utf-8 |
| X-Content-Type-Options | nosniff, nosniff |
| Content-Security-Policy | script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, require-trusted-types-for 'script', base-uri 'self';object-src 'none';script-src 'report-sample' 'nonce-ExASAJcqBvimVuhDC_d-NQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict, script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, require-trusted-types-for 'script', base-uri 'self';object-src 'none';script-src 'report-sample' 'nonce-Gp8q0nuByAK-gX6ZpUcCHg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict |
| Expires | Wed, 07 Oct 2026 02:59:03 GMT, Mon, 01 Jan 1990 00:00:00 GMT |
| Date | Wed, 07 Oct 2026 02:59:03 GMT, Wed, 07 Oct 2026 02:59:03 GMT |
| Cache-Control | private, max-age=31536000, no-cache, no-store, max-age=0, must-revalidate |
| Location | https://www.youtube.com/ |
| Content-Length | 0, 0 |
| P3P | CP="This is not a P3P policy! See g.co/p3phelp for more info.", CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en-GB for more info." |
| X-Frame-Options | SAMEORIGIN, SAMEORIGIN |
| Strict-Transport-Security | max-age=31536000; includeSubDomains; preload, max-age=31536000 |
| Accept-CH | Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-Viewport-Width, Sec-CH-DPR, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-Viewport-Width, Sec-CH-DPR, Device-Memory |
| Vary | Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-Viewport-Width, Sec-CH-DPR, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-Viewport-Width, Sec-CH-DPR, Device-Memory |
| Report-To | {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}, {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} |
| Origin-Trial | AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==, AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ== |
| Permissions-Policy | ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*, ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=* |
| Cross-Origin-Opener-Policy | same-origin-allow-popups; report-to="youtube_main", same-origin-allow-popups; report-to="youtube_main" |
| Server | ESF, ESF |
| X-XSS-Protection | 0, 0 |
| Set-Cookie | __Secure-BUCKET=CJQG; Domain=.youtube.com; Expires=Mon, 05-Apr-2027 02:59:03 GMT; Path=/; Secure; HttpOnly; SameSite=lax, __Secure-YNID=22.YT=Iv6NcJV1wB7vSPKQISGXj_rmXk0AVgKAQ7XdNKmjmL35efJjAqxEtuMwX-0thhjmqq36-qbeeHih1tIWIaI3jn2YjDri9_gr447gOT27XgH5OV7Oyyod1LSriCK93NKu_uHLXcI41O25yzn8s13gL6OdqP7MYY682EElEagUEz-cHOATtCCJohpYTwJuZiNvcbx-KgChujd6bxUPEJQSJvkxmi8Vir0XN88yRi3P2m9Ply9WMwc5wp9BFvLBmuFfghQiqZCdARh-ZNnjnc-QqVYYTGAuIAbgCn0BvK6DZEeiuJhYIQVCdw1gChhOZNQaEVMdj6yHxlCFjn0JPWtqLA; expires=Mon, 05-Apr-2027 02:59:03 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none; Partitioned, __Secure-BUCKET=CKIB; Domain=.youtube.com; Expires=Mon, 05-Apr-2027 02:59:04 GMT; Path=/; Secure; HttpOnly; SameSite=lax, __Secure-YNID=CuIBCAUSlAEB8QZuZvNpG87uvVbwyYXocPljkS5_gYK2rRVLOXT9aMfkPiD09w7Rf8AZ_VwL10viAcLt0mp8Pfp1FWIIWROROloSuMM1-BDT9ipUHKia5sRbeYf_JB67Hb94xxx-4Qf_FGIu85VzYVHv2W4F3eCgggCgu7-DYEif1ngIy87wc0qvINzWM_k3nTw5pbLhxsKjBaWUKAUyRQHeqZ1PLI3Az4pQORVIdsMIunOJnawwhq5WDpu5a0zo13tvpgQ-B4H_f-4nUGC34RUpdE1psA7ThKaVPm1SQgK2-za8Bw; expires=Mon, 05-Apr-2027 02:59:03 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none; Partitioned, GPS=1; Domain=.youtube.com; Expires=Wed, 07-Oct-2026 03:29:04 GMT; Path=/; Secure; HttpOnly, YSC=2z3bVsseQz8; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned, __Secure-ROLLOUT_TOKEN=CLHr8tyBhdeeyQEQlaXy4fSmlwMYlaXy4fSmlwM%3D; Domain=youtube.com; Expires=Mon, 05-Apr-2027 02:59:04 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned, __Secure-YEC=; Domain=.youtube.com; Expires=Thu, 11-Jan-2024 02:59:04 GMT; Path=/; Secure; HttpOnly; SameSite=lax, VISITOR_INFO1_LIVE=aG6pMUbLTQM; Domain=.youtube.com; Expires=Mon, 05-Apr-2027 02:59:04 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned, VISITOR_PRIVACY_METADATA=CgJJThIEGgAgZg%3D%3D; Domain=.youtube.com; Expires=Mon, 05-Apr-2027 02:59:04 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned |
| Alt-Svc | h3=":443"; ma=2592000,h3-29=":443"; ma=2592000, h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 |
| Connection | close, close |
| Pragma | no-cache |
| reporting-endpoints | crash-reporting="/web-reports?context=eJwNyX1MVWUAx3EO3wXk5eUe7r3n3HOe5zRjZKWDkALWi-TQFEWFXigWLQTE5saL4OV6RQJszqSQQetlRBLNJMcaLGkuMzW1yUqsjVU0k7mZzWRApQgosHr--Oy7_X6L9kYmZldqrzxYo7WsCWjTPQFtwy-12vjioFaYENTKr4S0LndBeOjvRRQuc3HsMxcnjroYve4irTaakx0xFF-N4cjxWPIGY2lXJhdiCZbF4QrG8WFzHOYPcZxMdDPc6Say383lGTetaTof5euMFulsfE2nvl5nr5LVqnO6V0f06cgbOldndf5bH8_GwnieGlYVHmZzPfzZ5OGbAQ_FX3lY85uHiAkP7970MD_noTraS57ppSTgpaHDS1-3l_FBL5VDXg6G-Vht-MgN-dDe87Hjgo-vdYNEj8HcIwZRmwzaSg2Gyg1mdhgcecOg44bBVLhJMMbk24dNPn_Z5E7IZLLZ5MoBk9R2k0MXTCoumwzfNFm4ZXJg1kS7a5Ln9yO2-NnQ6mdzl5-ufj8PxVtEPGZxKcti6nmLwWKL65UWjQ0Wvyv_NlpMKz2dFmsPW4wpUV9a7D9h4Ttv8fEli4pxi-CcxZsLFs3KgLCZV3jA5thSm7PLbX7aZLP_RRvtJZufi22yK2xOKXdqbOpbbN45aPNkr02m8sGITYfy9oTNXUW6Bdm6IEdZZwr-SRTcUu5NFsw_rvYCwdPbBXXVAl-D4P59gvQ2Qfingtg-gfGF4KJy7bQg4zvB2WHByB-CzX8Jsm4L8sMkMlKSnCiZWiI5t1Ryz0rJc-sk0esl3meVAsnrRZLcoOTRXZKm3ZLMJkn6Hkl3s6SgRRJolTQq1d2Stz6RrDokqTssGemVTB6V9AxIzh-XRJySDClbz0kiL0oKlTMTkpxJyQtKhZJwW_KjsmJaUjUjCbkcVrgdhpUC3aFe-d7vsPs-h32LHa5lOHQ-4bCQ6TC60sGb5dCi1K52WPWMQ_tah_4ch7E8hzP5DnWvOnSXOrTtdIgPOZQ1q7_HQVsSFhHvipode__XCHd3255lCUm7qmoDtSVlyTvLSpK21lRVBpLKKrckldZsC2wrLS4vSk1JTV-ekpKWnJJRtD3lfzvPEr0" |
| document-policy | include-js-call-stacks-in-crash-reports |