nytimes.com
HTTP check results
HTTP Response Headers
server
Varnish
retry-after
0
trace
fastly_error_code=770
location
https://www.nytimes.com/
accept-ranges
bytes
date
Fri, 27 Mar 2026 00:03:55 GMT
x-served-by
cache-bma-essb1270066-BMA
x-cache
HIT
x-cache-hits
0
set-cookie
datadome=0; Domain=.nytimes.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Lax; Secure
x-gdpr
1
permissions-policy
browsing-topics=()
x-frame-options
DENY
x-api-version
F-0
content-security-policy
upgrade-insecure-requests; default-src data: 'unsafe-inline' 'unsafe-eval' https: nytresource:; script-src data: 'unsafe-inline' 'unsafe-eval' https: blob: nytresource:; style-src data: 'unsafe-inline' https: nytresource:; img-src data: https: blob: android-webview-video-poster: nytresource:; font-src data: https: nytresource:; connect-src data: https: wss: blob: nytresource:; media-src data: https: blob: nytresource:; object-src https:; child-src https: data: blob: nytresource:; form-action https: nytimes: nytcooking: nytxwd:; report-uri https://csp.nytimes.com/report;
strict-transport-security
max-age=63072000; includeSubDomains; preload
access-control-expose-headers
X-Nyt-Mktg-Group
x-nyt-mktg-group
group5
x-nyt-edge-cache
HIT
x-nyt-app-webview
0
x-nyt-app-map
webview=false,preloaded=false,service-worker-enabled=false
access-control-allow-headers
traceparent, tracestate, X-B3-Sampled, X-B3-SpanId, X-B3-TraceId, x-datadog-origin, x-datadog-parent-id, x-datadog-sampling-priority, x-datadog-trace-id, x-nyt-entitlements, x-nyt-internal-meter-override
content-length
0
Security Headers
strict-transport-security
content-security-policy
x-frame-options
permissions-policy
x-content-type-options
x-xss-protection
referrer-policy