HTTP Headers for wsj.com

Responds with HTTP 401 HTTP Forbidden from CloudFront — 0 of 6 security headers present.

Domain to Check
401 HTTP Forbiddenhttps://www.wsj.com/
Security Headers0/6
HSTS
CSP
X-Frame-Options
X-Content-Type-Options
Referrer-Policy
Permissions-Policy
All Response Headers (20)
accept-chSec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
access-control-allow-credentialstrue
access-control-allow-origin*
access-control-expose-headersx-dd-b, x-set-cookie
cache-controlmax-age=0, private, no-cache, no-store, must-revalidate
charsetutf-8
connectionclose
content-length770
content-typetext/html;charset=utf-8
dateFri, 24 Apr 2026 15:43:10 GMT
pragmano-cache
serverCloudFront
set-cookiedatadome=LaMpPrNt5eKt0KWBSHP3~56vOj6mG5JVfjNghyTxCoSE0ZMok3gQj6vKPIxchLSCA0D1ykhmhcK1eboIOP0lN9vxfl8Hzw9Ap_IoInHrqFxcsg3oZ~IBgCPvG0Au6Vz_; Max-Age=31536000; Domain=.wsj.com; Path=/; SameSite=Lax
via1.1 0eead6b6d592f7fb31a5629652c63870.cloudfront.net (CloudFront)
x-amz-cf-id_tKbTYsohZwuspCGiIxA9QXOya4b7ayDiseifFgCgSzMCenVZQXhBQ==
x-amz-cf-popIAD61-P12
x-cacheLambdaGeneratedResponse from cloudfront
x-datadomeprotected
x-datadome-cidAHrlqAAAAAMAfp2pp3WAftIALNJjkw==
x-dd-b3
Related
HTTP Headers for wsj.com — CloudFront | ProfileMyIP