HTTP Headers for uber.com

Responds with HTTP 406 Not Acceptable from cloudflare — 3 of 6 security headers present.

Domain to Check
406 Not Acceptablehttps://www.uber.com/
Security Headers3/6
HSTS
CSP
X-Frame-Options
X-Content-Type-Options
Referrer-Policy
Permissions-Policy
All Response Headers (15)
cache-controlno-store, max-age=0
cf-cache-statusBYPASS
cf-ray9f1636fc4f00d6b1-IAD
connectionclose
content-length14
content-typetext/plain; charset=utf-8
dateFri, 24 Apr 2026 15:41:54 GMT
servercloudflare
set-cookie__cf_bm=oYojKBOvXyGsHvjbkdKUleAF2D2JkjOKJdCRfIaobAc-1777045314-1.0.1.1-6KPoWzzNJsCAaI_9COTW6PRmKj62yEVRtpu2e_rjWNqUCMZ.FZVExFOOzNqZBGDCWQBOacHX2RibgQxRhp9UDoBIvcYNDNLWfbQHfv0iaN8; path=/; expires=Fri, 24-Apr-26 16:11:54 GMT; domain=.uber.com; HttpOnly; Secure; SameSite=None
strict-transport-securitymax-age=31536000
varyAccept-Encoding
x-content-type-optionsnosniff
x-envoy-upstream-service-time269
x-frame-optionsSAMEORIGIN
x-uber-edgee4-dca51:w:521104458,ufe:production-cloudflare:compute-0:dca23,cloudflare:production:default
Related
HTTP Headers for uber.com — cloudflare | ProfileMyIP