Domain report
securityheaders.com
securityheaders.com ranks in the top 0.0019% of domains by connectivity (Common Crawl, cc-main-2026-jul-aug-sep), with 3 distinct hosts observed under it.
Connectivity
- Top percentile
- 0.0019%
- Hosts observed
- 3
From the Common Crawl cc-main-2026-jul-aug-sep hyperlink graph, 133,241,980 domains total. What this rank means
HTTPS reachability
https://securityheaders.com/ answered with HTTP 200.
Certificate until 2026-12-12C=US, O=Let's Encrypt, CN=YR1
DNS records
- A
- 104.18.24.239
- 104.18.25.239
- AAAA
- 2606:4700::6812:18ef
- 2606:4700::6812:19ef
- MX
- 1 aspmx.l.google.com.
- 5 alt1.aspmx.l.google.com.
- 5 alt2.aspmx.l.google.com.
- 10 alt3.aspmx.l.google.com.
- 10 alt4.aspmx.l.google.com.
- NS
- karl.ns.cloudflare.com.
- adrian.ns.cloudflare.com.
- AS
- Server in network CLOUDFLARENET, AS13335 · United States104.18.24.0/24, which holds 104.18.24.239
Live preview
This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.
Since securityheaders.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.
Domain registration (WHOIS / RDAP)
- Registrar
- Cloudflare, Inc.
- Registered
- 2013-03-10
- Expires
- 2027-03-10
- Last changed
- 2024-09-04
Nameservers: ADRIAN.NS.CLOUDFLARE.COM, KARL.NS.CLOUDFLARE.COM
Status: client transfer prohibited
SSL certificate
- Common name
- securityheaders.com
- Issuer
- C=US, O=Let's Encrypt, CN=YR1
- Valid from
- 2026-09-13
- Valid until
- 2026-12-12
Matches securityheaders.com exactly. Source: Certificate Transparency logs (crt.sh).
HTTP & security headers
Response
- Server
- cloudflare
- Content-Type
- text/html; charset=UTF-8
- Cache-Control
- public, max-age=60
- Content-Encoding
- Not sent
Security
- Content-Security-Policy
- default-src 'self'; script-src 'self' 'sha256-MNB+aPkufy/7Tu0rd2beFGhj+YxaLoXBC4trZaiWpVQ=' js.stripe.com static.cloudflareinsights.com www.google.com/recaptcha/api.js www.gstatic.com/recaptcha/releases/ *.googletagmanager.com j.6sc.co; connect-src 'self' *.googletagmanager.com *.google-analytics.com *.analytics.google.com www.google.com www.gstatic.com; img-src 'self' *.google-analytics.com *.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com; font-src 'self' fonts.gstatic.com cdnjs.cloudflare.com; form-action 'self'; frame-src js.stripe.com www.google.com *.googletagmanager.com; report-uri https://scotthelme.report-uri.com/r/d/csp/enforce; report-to default
- Strict-Transport-Security
- max-age=31536000; includeSubDomains; preload
- X-Frame-Options
- SAMEORIGIN
- X-Content-Type-Options
- nosniff
- Referrer-Policy
- strict-origin-when-cross-origin
- Permissions-Policy
- accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
Redirect chain
- 1.
http://securityheaders.com/The operation was aborted due to timeout
Meta tags
- Title
- Analyse your HTTP response headers
- Description
- Quickly and easily assess the security of your HTTP response headers
- Canonical
- Not set
- Robots
- Not set
- Generator
- Not set
- Open Graph title
- Analyse your HTTP response headers
- Open Graph description
- Quickly and easily assess the security of your HTTP response headers
- Open Graph image
- https://securityheaders.com/images/security-headers.png
- Open Graph type
- website
- Twitter card
- Not set
- Twitter title
- Not set
- Twitter image
- Not set
robots.txt
- Disallow rules (User-agent: *)
- 0
- Disallow rules (other agents)
- 0
No Sitemap declared in robots.txt.
Technology detected
Best-effort, based on a small set of well-known signals — this may be incomplete.
- Cloudflarecdn
Server: cloudflare
- PHPother
X-Powered-By: PHP/8.5.12
- Google Tag Manageranalytics
Found "googletagmanager.com/gtm.js" in the page's HTML
Related domains
Similar connectivity
Domains ranked just above and below it in the same snapshot.