HTTP Headers for engadget.com

Responds with HTTP 200 from ATS — 4 of 6 security headers present.

Domain to Check

200 https://www.engadget.com/

Security Headers4/6

HSTS

CSP

X-Frame-Options

X-Content-Type-Options

Referrer-Policy

Permissions-Policy

All Response Headers (17)

age206

cache-controlpublic, max-age=300

connectionclose

content-encodinggzip

content-length51305

content-typetext/html; charset=utf-8

dateFri, 24 Apr 2026 14:09:56 GMT

referrer-policyno-referrer-when-downgrade

serverATS

strict-transport-securitymax-age=31536000

x-amz-cf-idRE0krdIDIxKy-64M9P9rXmzslADLCNWtbPDDJnRWu2vm6xQ-zGB-hA==

x-amz-cf-popMCI50-P1

x-amz-server-side-encryptionAES256

x-cacheHit from cloudfront

x-content-type-optionsnosniff, nosniff

x-frame-optionsSAMEORIGIN

x-xss-protection1; mode=block

Check any domain's SSL/TLS certificate — issuer, expiry, SANs, and cipher.

Searchable reference of all HTTP status codes with descriptions and use cases.

Look up WHOIS details for any domain or IP address.