Web response audit
www.google.com HTTP headers
SEO page with a cached HTTP response header and security signals check.
Results
Status
200
Final URL
https://www.google.com
Accept-Ch
Sec-CH-Prefers-Color-Scheme
Alt-Svc
h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Cache-Control
private, max-age=0
Content-Security-Policy-Report-Only
object-src 'none';base-uri 'self';script-src 'nonce-bCW7H-hkIDWBf11u-Fg-VQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp
Content-Type
text/html; charset=ISO-8859-1
Date
Thu, 11 Jun 2026 13:16:34 GMT
Expires
-1
P3p
CP="This is not a P3P policy! See g.co/p3phelp for more info."
Server
gws
Set-Cookie
__Secure-STRP=ANmZwa0yMxMAtogSrD7M2WdrhpqPVF0FuRFk42dottCme9nX8_p1jN6D-qTwm4kbWTf8FisT5zwXyinbLuhKoLu5RjDHv0LrpA; expires=Thu, 11-Jun-2026 13:21:34 GMT; path=/; domain=.google.com; Secure; SameSite=strict, AEC=AaJma5vefx6st0QQNXK6fvtlyf6p2ZZI22bWPBsvHbvE0wep86Xls-UQfg; expires=Tue, 08-Dec-2026 13:16:34 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax, NID=532=SjNl_YJstdtB2swz3NRgl0bI3zekR_ADAoJQTGEyEElYLTVKqENnrAmRMgYCn8baf6dS8lLEsBAdvjMh3O0lJD19xyaltTga4H-fipyEFai5jF-zM9L_ER4GTwvfdM7J-xLf8o8IsaNR6Htu3dAzxCnSWJuhv34MXFPjWOKP6w4VQX5L6lD5PfcqxqhyFYZblguaElS7q3HDmMmMasxxqA8; expires=Fri, 11-Dec-2026 13:16:34 GMT; path=/; domain=.google.com; HttpOnly, __Secure-BUCKET=CL4E; expires=Tue, 08-Dec-2026 13:16:34 GMT; path=/; domain=.google.com; Secure; HttpOnly
X-Frame-Options
SAMEORIGIN
X-Xss-Protection
0