StatsMyWeb
Main menu

Domain report

securityheaders.io

securityheaders.io ranks in the top 0.31% of domains by connectivity (Common Crawl, cc-main-2026-jul-aug-sep), with 3 distinct hosts observed under it.

Explore securityheaders.io in the Web Graph

Connectivity

#409,506harmonic-centrality rank
Top percentile
0.31%
Hosts observed
3

From the Common Crawl cc-main-2026-jul-aug-sep hyperlink graph, 133,241,980 domains total. What this rank means

HTTPS reachability

200HTTP status

https://securityheaders.io/ answered with HTTP 200.

DNS records

A
  • 104.21.21.50
  • 172.67.196.107
AAAA
  • 2606:4700:3033::6815:1532
  • 2606:4700:3036::ac43:c46b
MX
  • 10 in1-smtp.messagingengine.com.
  • 20 in2-smtp.messagingengine.com.
NS
  • karl.ns.cloudflare.com.
  • adrian.ns.cloudflare.com.

Live preview

Screenshot of securityheaders.io

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since securityheaders.io can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

Domain registration (WHOIS / RDAP)

RDAP lookup failed (HTTP 429).

How to read WHOIS and RDAP data

SSL certificate

Certificate Transparency lookup failed (HTTP 429).

How to check when a certificate expires

HTTP & security headers

Response

Server
cloudflare
Content-Type
text/html; charset=UTF-8
Cache-Control
public, max-age=60
Content-Encoding
Not sent

Security

Content-Security-Policy
default-src 'self'; script-src 'self' 'sha256-MNB+aPkufy/7Tu0rd2beFGhj+YxaLoXBC4trZaiWpVQ=' js.stripe.com static.cloudflareinsights.com www.google.com/recaptcha/api.js www.gstatic.com/recaptcha/releases/ *.googletagmanager.com j.6sc.co; connect-src 'self' *.googletagmanager.com *.google-analytics.com *.analytics.google.com www.google.com www.gstatic.com; img-src 'self' *.google-analytics.com *.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com; font-src 'self' fonts.gstatic.com cdnjs.cloudflare.com; form-action 'self'; frame-src js.stripe.com www.google.com *.googletagmanager.com; report-uri https://scotthelme.report-uri.com/r/d/csp/enforce; report-to default
Strict-Transport-Security
max-age=31536000; includeSubDomains; preload
X-Frame-Options
SAMEORIGIN
X-Content-Type-Options
nosniff
Referrer-Policy
strict-origin-when-cross-origin
Permissions-Policy
accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()

What each security header does

Redirect chain

  1. 1.http://securityheaders.io/HTTP 302

    → https://securityheaders.com/

  2. 2.https://securityheaders.com/HTTP 200

Meta tags

Title
Analyse your HTTP response headers
Description
Quickly and easily assess the security of your HTTP response headers
Canonical
Not set
Robots
Not set
Generator
Not set
Open Graph title
Analyse your HTTP response headers
Open Graph description
Quickly and easily assess the security of your HTTP response headers
Open Graph image
https://securityheaders.com/images/security-headers.png
Open Graph type
website
Twitter card
Not set
Twitter title
Not set
Twitter image
Not set

robots.txt

Disallow rules (User-agent: *)
0
Disallow rules (other agents)
0

No Sitemap declared in robots.txt.

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

  • Cloudflarecdn

    Server: cloudflare

  • PHPother

    X-Powered-By: PHP/8.5.9

  • Google Tag Manageranalytics

    Found "googletagmanager.com/gtm.js" in the page's HTML

Related domains

Similar connectivity

Domains ranked just above and below it in the same snapshot.