HTTP Headers report for bicycling.com

Header Name	Header Data
HTTP status code	200
Content-Security-Policy	upgrade-insecure-requests; default-src https: data: 'unsafe-inline' 'unsafe-eval' https: https://accounts.google.com/gsi/; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: https://accounts.google.com/gsi/client; style-src data: 'unsafe-inline' https: https://accounts.google.com/gsi/style; img-src data: https: blob:; font-src data: https:; connect-src https: wss: blob: https://accounts.google.com/gsi/; media-src data: https: blob:; object-src https:; child-src https: data: blob:; form-action https:; frame-ancestors 'self';
Content-Type	text/html; charset=utf-8
X-Content-Type-Options	nosniff
X-Xss-Protection	1; mode=block
X-Robots-Tag	all
Accept-Ranges	bytes
Strict-Transport-Security	max-age=31557600; includeSubDomains
Link	<https://hips.hearstapps.com>; rel=preconnect,<https://cdn.cookielaw.org>; rel=preconnect
Connection	keep-alive
Age	2240
Date	Tue, 08 Apr 2025 14:40:29 GMT
X-Cache	HIT, HIT
Cache-Control	max-age=0, must-revalidate, no-store, private
Etag	"s4wx3dul2h9590"
Expires	Tue, 08 Apr 2025 14:03:08 GMT
Referrer-Policy	no-referrer-when-downgrade
Set-Cookie	mosb=; expires=Mon, 08 Apr 2024 14:40:29 GMT; secure; path=/;
Server-Timing	time-start-msec;dur=1744123229718,time-elapsed;dur=1,fastly-pop;desc=AMS,hit-state;desc=HIT-CLUSTER
X-Country	NL
Alt-Svc	h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

About the tool

By using SecurityHeaders.info, you can quickly identify missing or misconfigured headers and take steps to secure your website, improving both security and user confidence.

This tool is widely used by developers, security professionals, and organizations to ensure their websites adhere to best practices in web security.

We also have another analytic tool that is used for identifying popularity metrics, general information about the business, finding similar products and competitors, and much more.

Watch it now at TrustRadar