DNS Gurus
Cached · 35m ago
22 Headers

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=15552000
Content-Security-Policy
Weak
frame-ancestors; upgrade-insecure-requests
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer-when-downgrade
Permissions-Policy
Missing
Not configured
Recommendations
  • • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • • Significantly strengthen CSP directives
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Consider adding Permissions-Policy to control browser features

Performance Headers

3 headers
Connection
Performance
close
Transfer-Encoding
Performance
chunked
Vary
Performance
Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers

Caching Headers

2 headers
Cache-Control
Caching
max-age=1800, private
Expires
Caching
Thu, 01 Jan 1970 00:00:00 GMT

Content Headers

1 headers
Content-Type
Content
text/html;charset=utf-8

Server Headers

1 headers
Server
Server
cloudflare

CORS Headers

0 headers
No CORS headers found

Cookies Headers

1 headers
Set-Cookie
Cookies
_cfuvid=aSqg4ixv8BrccnD7B3m6Ayyzn7QQuY26E_bjcnQmM1M-1768807406524-0.0.1.1-604800000; path=/; domain=.thoughtco.com; HttpOnly; Secure; SameSite=None

Other Headers

10 headers
Alt-Svc
Other
h3=":443"; ma=86400
Cf-Cache-Status
Other
DYNAMIC
Cf-Ray
Other
9c0496326b33c9af-IAD
Date
Other
Mon, 19 Jan 2026 07:23:26 GMT
Link
Other
<//www.thoughtco.com/static/6.56.0/cache/eNqdVVl2wyAMvFB5HKK_vYQCsq2axQWctLcvi-uloSbpjxmkGSQkwNwHCCS4BhMUcuE9TxZ84fcO0tAjmxQIHKyS6GokjY4kgeFkJH6ujOwCMgfDYDVOcc3NaPVkDZrg-RiT-Czfv90OO3RoBLIjUVs5K_R7gQNS7EoSbQ6d0Rn_An4ph2AgfS2HaOZ7108VNsaNZI9xHJD6IbwOYHp8Ix_QoKsaa2F6ZS-gIh1kVoGs8wxcqY9Ga7gfaWKKzLihmqKzTsf1U2BQzCM4MfyaNgKVbFi07GBD081KeeEQTdYdpw3txcUows364ve4oRLWBBAhh9vhhup91ksRV3TS6qVLnbUhdqkMJ92s8-6X3TfVCop9yZtI53Kdtg7DpqtoTkOW9EqbVviUNFXNHyaPyaUNEvzAZkNXdH7Jv2ptbL-8Wkm9opMUMifXt6eutrJHkZaNN99Fj0ImrJr1_bymVfGWx3OrrBhZwjtYo2fvMpRvq9OTDSo9Kht6XsFuFAYWKBbm7H30HzO4nx8GifGLFcujmiO5mV2p-q-0Ht9TKeU_hKk331MswTU.min.css>; rel=preload; as=style; nopush, <//www.thoughtco.com/static/6.56.0/fonts/Lato-900.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin; nopush, <//www.thoughtco.com/static/6.56.0/fonts/Lato-900-Italic.woff2>; rel=preload; as=font; type="font/woff2"; crossorigin; nopush, <//www.googletagmanager.com/gtm.js?id=GTM-5P3SZGS>; rel=preload; as=script; nopush, <//www.googletagmanager.com/gtag/js?id=G-607QNCLEV4&l=dataLayer&cx=c>; rel=preload; as=script; nopush, <//securepubads.g.doubleclick.net/tag/js/gpt.js>; rel=preload; as=script; nopush, <//www.thoughtco.com/static/6.56.0/cache/eNp9klFugzAMhi-0iDNs07SnStPWC4TEUJcQo9hQtadfgjYVkOEhKMn3-4-xXbFYQVf1NkqA6sqVJOvgpVrfO-oHihCFq2DvNEpRXtm4C7huK74W0ePO-ICsoNhgu5UErHmtwyiQGJwgRc2QrAevAEfUIbBCRsGAorMmmiPsqT_kpUYdxvZQNEH0lCq5JJJ8tWMDxnreZe42KazPG1MnsN1AuW7P8MwSNJAg5tjd3BbNdJya-aO9Yu-1lvVgWzATwu3At5V-bk5A15n_amleY81j_QTkxwDzZHyf38raQ7Nn3nxMsCzAQmX93-wZO-D6pCTyfvrSTJQaLl84gSR0fC7JQFI14zzRpglEaXvUAn4C6f_z-XUuS0NiUwtS5pFtAwFZNBW79ag9SYJcxRHO2z4tGpoji7IdRDdoEvDF1gFePf8CMT6fyw.min.js>; rel=preload; as=script; nopush; group=top, <//www.thoughtco.com/static/6.56.0/cache/eNqlUkFSwzAM_BAav4Hhyo0XKLbiiChysZzS9vU4DgMlzeTCxZJ2dteSbGcFC3s3oRYh925uqgmcUVkEwXxOIk_uL8un6ZSUtJhjLZQVxQXqKS_6lmQKByK6rCK-EQjraIvuAfy3AdRWcJYCJ5kj64_fndGIhS7r-XtdCrNQs3wO8DYwSXAYwFq2RxO8XQGPJv7kEKnGgTgO5WVAjfTKVkjr0vbAvWajpK5ueiAMTbWEPV6f8lTZiw0KGGH2w6bckymeOVYwqetnkfr0RAoV3ZQHYwZGSfE7tEc4-joTxvbjIvdbmnDXNmsVG68dF3vY-52TfcyYm5V5kORHWJEv_DAY1w.min.js>; rel=preload; as=script; nopush; group=bottom
Nel
Other
{"report_to":"network-errors","max_age":2592000,"success_fraction":0,"failure_fraction":1.0,"include_subdomains":true}
Report-To
Other
{"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://rjs.3gl.net/hawklogserver/561/re.p"}]}
X-Abt-Application-Version
Other
6.56.0
X-Connection-Protocol
Other
HTTP/1.1
X-Content-Security-Policy
Other
frame-ancestors 'self' https://*.seo.aws.about.com https://*.dotdash.com *.thoughtco.com; upgrade-insecure-requests;

Recommendations

Enable compression (gzip/brotli) to improve performance