huffpost.com

HTML metadata

Title

HuffPost - Breaking News, Politics, Entertainment & Opinion

Description

Read the latest U.S. and world news, politics, entertainment, lifestyle and opinion pieces from HuffPost’s trusted team of journalists.

Language

en

Canonical

https://www.huffpost.com/

Translations

el-gr
en-au
en-ca
en-gb
en-in
es-es
fr-ca
fr-fr
it-it
ja-jp
ko-kr
pt-br

Open Graph

url: https://www.huffpost.com/
title: HuffPost - Breaking News, U.S. and World News
app id: 46744042133
image:url: https://img.huffingtonpost.com/asset/6876d9b316000014e542cf17.jpg
site name: HuffPost
description: Read the latest U.S. and world news, politics, entertainment, lifestyle and opinion pieces from HuffPost’s trusted team of journalists.

Technology

Server: nginx
CMS: Gatsby

Analytics

Google Tag Manager

Ads

Amazon Ads
Outbrain

Cookie consent

OneTrust

Fonts

Adobe Fonts
Google Fonts

Third-party hosts loaded (26)

img.huffingtonpost.com×117
fonts.googleapis.com×12
cdn.cookielaw.org×3
use.typekit.net×3
abeagle-public.buzzfeed.com×2
cd.connatix.com×2
cds.connatix.com×2
fonts.gstatic.com×2
www.googletagmanager.com×2
c.aps.amazon-adsystem.com×1
client.aps.amazon-adsystem.com×1
config.aps.amazon-adsystem.com×1
quebec.huffingtonpost.ca×1
sb.scorecardresearch.com×1
widgets.outbrain.com×1
www.huffingtonpost.ca×1
www.huffingtonpost.co.uk×1
www.huffingtonpost.com.au×1
www.huffingtonpost.es×1
www.huffingtonpost.fr×1
www.huffingtonpost.gr×1
www.huffingtonpost.in×1
www.huffingtonpost.it×1
www.huffingtonpost.jp×1
www.huffingtonpost.kr×1
www.huffpostbrasil.com×1

Social

Contact

Address: st News. ©2026

Registration

Registrar

MarkMonitor Inc.

Created

2005-03-10

Expires

2028-03-10 661 days left

Updated

2026-02-06

Name servers

ns-1081.awsdns-07.org
ns-1616.awsdns-10.co.uk
ns-247.awsdns-30.com
ns-843.awsdns-41.net

DNS records live

NS

ns-1081.awsdns-07.org
ns-1616.awsdns-10.co.uk
ns-247.awsdns-30.com
ns-843.awsdns-41.net

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 16 TXT records

google-site-verification=rkrPZZAVbkOUE4SJb71OCo0uxy23OFQpcJpGy12WDjY
adobe-idp-site-verification=82dd13381f860472d15ec91a855861633ea9e0f4588d09975b00c1706738826b
00d1n000002duvuuae
docusign=54594994-f075-4ac7-86c4-8a9aa4677d1d
rx0fh1r8yx9vnv9tnh87tggnksj8m44p
dropbox-domain-verification=uqrgxlh1a22z
lucidlink-verification=S7PDJGF9RGN0HSM35WRZG84NK0
knowbe4-site-verification=874a4c20e9e2aa7b3811f96fed08f4ad
tollbit-domain-verification=91344f4a1eab743f82720f591bf23ad17ab7510cf75f8a745841a2467ecc73e3
facebook-domain-verification=r3yrzm13yak5mvla48450yvwgxj4sp
atlassian-domain-verification=7oN0IBPtC9f0xMQLjXiV1ygnfkGihQQCZA6izoicm75MUVtLKeZNXzNNOj9FowZN
google-site-verification=r3huHFwsnWrvPp7spghu0iP-slB8ECw6FK5_23taMZs
google-site-verification=jJhMUcs-jJy48WzbWBvoG_6eL5HlZ8oaCRkWM5HVqf4
apple-domain-verification=7Y1F2DtfeAbwpA4O
MS=ms75321386
google-site-verification=ntu6PxVb-KuS3NAx7gdbRzlQ4965Q-goe74X5Vk_JZ4

Email authentication strong

SPF

v=spf1 mx ip4:74.205.21.242 ip4:149.174.0.0/16 ip4:64.236.0.0/16 ip4:204.29.186.0/23 ip4:148.163.135.35/32 ip4:148.163.139.55/32 include:sendgrid.net include:_spf.google.com include:aspmx.sailthru.com include:amazonses.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:rua@huffpost.com; ruf=mailto:ruf@huffpost.com;

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCit4CDZf8lOhOwPPRXrD5soHzkiocPoh5Dl4BbgX5l8DSuyiQsnuZoWR0oF6sFpGLZl1UC7hKFoo81sDtHIZ…

selectors probed

Certificate (current)

GlobalSign Atlas R3 DV TLS CA 2025 Q4

from 2025-10-24 to 2026-11-25

Expires in 191 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.huffpost.com/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy

findings

CSP uses wildcard sources
missing frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-content-type-options: nosniff
content-security-policy: sandbox allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation allow-top-navigation-by-user-activation; frame-ancestors 'self' *.huffpost.com *.huffingtonpost.com *.huffpost.net *.buzzfeed.com clients.opinary.com compass.pressekompass.net *.newsbreak.com *.newsbreakapp.com *.upday-content.com *.upday.com *.samsung-news.com; report-uri https://huffpost.report-uri.com/r/d/csp/enforce;
strict-transport-security: max-age=31536000