highlights.com

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since highlights.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=UTF-8

Cache-Control

no-store, no-cache, must-revalidate, max-age=0

Content-Encoding

Not sent

Security

Content-Security-Policy

font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com static-assets.bamgrid.com *.fontawesome.com *.yotpo.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com staticw2.yotpo.com *.klaviyo.com *.mczbf.com *.sjwoe.com cj.dotomi.com *.emjcd.com idsync.rlcdn.com *.cj.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.yotpo.com *.amazon.com *.alchemer.com *.mczbf.com *.sjwoe.com cj.dotomi.com *.emjcd.com idsync.rlcdn.com *.cj.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self' *.abtasty.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.cdsglobalapps.net *.resin.com *.amazonaws.com widget.trustpilot.com td.doubleclick.net ct.pinterest.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.yotpo.com www.youtube.com *.g.doubleclick.net *.doubleclick.net tpc.googlesyndication.com pinterest.com tr.snapchat.com paymentcapture.resin.com payments.amazon.com payments-sandbox.amazon.com cdsg-nonprod02-payments-ui.s3.amazonaws.com *.adsrvr.org *.quantummetric.com home-c35.nice-incontact.com s.amazon-adsystem.com www.emjcd.com *.commercepartnerhub.com *.abtasty.com *.mczbf.com *.sjwoe.com cj.dotomi.com *.emjcd.com idsync.rlcdn.com *.cj.com https://fetchply.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com sw88.nationalgeographic.com www.google.ca www.google.com.au www.google.de www.google.com.pk www.google.co.in alb.reddit.com bat.bing.com dcf.espn.com cdn.cookielaw.org www.facebook.com *.convertexperiments.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ mageside.com connect.facebook.net graph.facebook.com business.facebook.com *.yotpo.com *.alothemes.com *.magepow.com *.azureedge.net *.highlights.com ct.pinterest.com log.pinterest.com markhor.organicfruitapps.com *.g.doubleclick.net cdn-vzn.yottaa.net p.yotpo.com collector-9323.us.tvsquared.com login.dotomi.com login-ds.dotomi.com sp.analytics.yahoo.com t.co instagram.com d3k81ch9hvuctc.cloudfront.net tr.snapchat.com c.bing.com bam.nr-data.net c.clarity.ms *.cdnwidget.com pippio.com *.adsrvr.org analytics.twitter.com alchemerlibrary.s3.amazonaws.com ib.adnxs.com pixel.rubiconproject.com m.media-amazon.com images-na.ssl-images-amazon.com https://cdn-cookieyes.com *.mczbf.com *.sjwoe.com cj.dotomi.com *.emjcd.com idsync.rlcdn.com *.cj.com cdnjs.cloudflare.com *.abtasty.com assets.uptick.com *.applovin.com cdn.klaviyomail.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://app.m2-stores.test *.cdsglobalapps.net *.resin.com *.amazonaws.com *.payments-amazon.com bat.bing.com s.pinimg.com www.redditstatic.com connect.facebook.net munchkin.marketo.net *.klaviyo.com widget.trustpilot.com ct.pinterest.com dcf.espn.com cdn.cookielaw.org cdn.espn.com analytics.tiktok.com snap.licdn.com tags.srv.stackadapt.com *.convertexperiments.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ graph.facebook.com business.facebook.com *.yotpo.com *.alothemes.com *.magepow.com *.cloudfront.net *.highlights.com autolinkmaker.itunes.apple.com collector-9323.us.tvsquared.com *.pinterest.com payments.qa-cloud.buysub.com identity.qa-cloud.buysub.com s.yimg.com platform.twitter.com static.ads-twitter.com analytics.twitter.com www.google.com www.googleoptimize.com tpc.googlesyndication.com staticw2.yotpo.com js-agent.newrelic.com/ lsdm.co mpsnare.iesnare.com *.mpsnare.iesnare.com wss://mpsnare.iesnare.com bam.nr-data.net track.securedvisit.com *.clarity.ms sc-static.net paymentcapture.resin.com *.quantummetric.com paymentcapture-staging.resin.com static-na.payments-amazon.com cdsg-nonprod02-payments-ui.s3.amazonaws.com *.alchemer.com *.abtasty.com 'unsafe-inline' *.mountain.com js.adsrvr.org payments-ui.cdsshopqa.cdsglobalapps.net https://cdn-cookieyes.com *.mczbf.com *.sjwoe.com cj.dotomi.com *.emjcd.com idsync.rlcdn.com *.cj.com https://www.noupe.com https://fetchply.com https://app.uptick.com *.axon.ai *.applovin.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com *.fontawesome.com *.yotpo.com *.googleapis.com *.alothemes.com *.magepow.com *.highlights.com payments.qa-cloud.buysub.com *.klaviyo.com use.typekit.net p.typekit.net staticw2.yotpo.com 'unsafe-inline' *.mczbf.com *.sjwoe.com cj.dotomi.com *.emjcd.com idsync.rlcdn.com *.cj.com *.abtasty.com https://api.uptick.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com mpsnare.iesnare.com ac1hcsweb.blob.core.windows.net *.azureedge.net data: *.mczbf.com *.sjwoe.com cj.dotomi.com *.emjcd.com idsync.rlcdn.com *.cj.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com https://payments-sandbox.amazon.com *.payments-amazon.com *.doubleclick.net sw88.nationalgeographic.com disney.demdex.net analytics.tiktok.com analytics-ipv6.tiktokw.us info.cricketmedia.com pixel-config.reddit.com www.redditstatic.com ct.pinterest.com 357-nuk-896.mktoresp.com bat.bing.com www.nationalgeographic.com assets-cdn.nationalgeographic.com doh.cq0.co cdn.cookielaw.org px.ads.linkedin.com *.klaviyo.com *.convertexperiments.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.yotpo.com *.alothemes.com *.magepow.com *.highlights.com *.pinterest.com www.google-analytics.com stats.g.doubleclick.net payments-api.qa-cloud.buysub.com s.yimg.com staticw2.yotpo.com bam.nr-data.net analytics.google.com adservice.google.com wss://mpsnare.iesnare.com *.clarity.ms *.cdnbasket.net tr.snapchat.com *.cdnwidget.com payments.amazon.com payments-sandbox.amazon.com *.quantummetric.com static-na.payments-amazon.com *.alchemer.com surveygizmobeacon.s3.amazonaws.com *.abtasty.com https://cdn-cookieyes.com *.cookieyes.com *.mczbf.com *.sjwoe.com cj.dotomi.com *.emjcd.com idsync.rlcdn.com *.cj.com https://www.noupe.com https://fetchply.com https://app.uptick.com https://api.uptick.com https://alb.reddit.com https://ads.reddit.com *.applovin.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.klaviyo.com *.abtasty.com *.mczbf.com *.sjwoe.com cj.dotomi.com *.emjcd.com idsync.rlcdn.com *.cj.com 'self' 'unsafe-eval'; base-uri 'self';, upgrade-insecure-requests;

Strict-Transport-Security

max-age=31536000; includeSubDomains

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

Not sent

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://highlights.com/HTTP 301

   → https://www.highlights.com/

2. 2.https://www.highlights.com/HTTP 301

   → https://shop.highlights.com/

3. 3.https://shop.highlights.com/HTTP 200

Meta tags

Title

Subscriptions, Books & Puzzles | Highlights for Children

Description

Join millions of young readers with Highlights for Children! Discover puzzles, magazines and learning activities that provide endless fun for kids.

Canonical

https://shop.highlights.com

Robots

INDEX,FOLLOW

Generator

Not set

Open Graph title

Not set

Open Graph description

Not set

Open Graph image

Not set

Open Graph type

Not set

Twitter card

Not set

Twitter title

Not set

Twitter image

Not set

robots.txt

highlights.com has no robots.txt.

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

Related domains