No Security Risks Detected
This domain appears to be safe and secure
100%
Score
Disclaimer: This assessment is based on automated analysis of publicly available information. Results are for informational purposes only. For critical applications, consult security professionals.
Scan Information
Last checked:August 28, 2025 14:37:17
Target URL:https://myheritage.com/
Scan Complete
Refresh page after 10 minutes
for updated results
Page Information
Target URL
https://myheritage.com/
Page Title
Free Family Tree, Genealogy, Family History, and DNA Testing
Status
Active
Host Information
Domain
www.myheritage.com
Server
Apache
Country
United States
IP Address
45.60.11.42
ASN Information
19551
INCAPSULA
Technologies
Google Sign-in
Authentication
Amazon Web Services
PaaS
Apache HTTP Server
Web servers
reCAPTCHA
Security
Imperva
Security
HSTS
Security
+2 more technologies detected
SSL Certificate
HTTPS Enabled
Secure
Certificate Issuer
N/A
Valid From
2025-08-27 14:37:25
Valid Until
2026-08-28 14:37:25
Subject Name
www.myheritage.com
Performance Statistics
49
Total Requests
7
Domains
6
IP Addresses
421.12 KB
Transfer Size
Content Size779.24 KB
HTTP Headers
Connection
keep-alive
Content-Type
text/html; charset=UTF-8
Date
Thu, 28 Aug 2025 14:37:25 GMT
Transfer-Encoding
chunked
Via
1.1 2c1ef6b20d81714646371fcbdee020c6.cloudfront.net (CloudFront)
X-Amz-Cf-Id
DRMh9MXEEEvEB17-qfE8Tzx81rcn8srfsFKjrYJl3vq6IjHSLE5MSw==
X-Amz-Cf-Pop
LAX54-P6
X-CDN
Imperva
X-Cache
Miss from cloudfront
X-Iinfo
57-190094647-190094656 NNNN CT(5 20 0) RT(1756391845198 15) q(0 0 0 -1) r(1 2) U5
cache-control
no-store, no-cache, must-revalidate
post-check=0, pre-check=0
content-encoding
gzip
content-security-policy
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.googleapis.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://*.googleapis.com https://appleid.cdn-apple.com 'nonce-eb5eb45c054d8e644a61df919bf9787c' 'strict-dynamic';style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://*.googleapis.com https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=enforce&canonical_page_id=/company/home/
content-security-policy-report-only
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.googleapis.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://*.googleapis.com https://appleid.cdn-apple.com 'unsafe-eval' 'nonce-eb5eb45c054d8e644a61df919bf9787c' 'strict-dynamic';style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://*.googleapis.com https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/
expires
Mon, 26 Jul 1997 05:00:00 GMT
pragma
no-cache
server
Apache
strict-transport-security
max-age=2592000; includeSubDomains
vary
Accept-Encoding
x-content-type-options
nosniff
x-frame-options
SAMEORIGIN
x-xss-protection
1; mode=block
22 headers detected
Technology Stack Analysis
Google Sign-in
Authentication
Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.
Amazon Web Services
PaaS
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.
Apache HTTP Server
Web servers
Apache is a free and open-source cross-platform web server software.
reCAPTCHA
Security
reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.
Imperva
SecurityCDN
Imperva is a cyber security software and services company for networking, data, and application security.
HSTS
Security
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
Amazon S3
CDN
Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.
Amazon CloudFront
CDN
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.
Website Cookies 9
device_id
.myheritage.com
HttpOnly Secure None
Value
D_089oz6aiu1q16yb5_1b8ub1y96a5v6l08
Expires:8/28/2026
mhc_version
.myheritage.com
Secure None
Value
7
Expires:8/28/2026
uuid
.myheritage.com
HttpOnly Secure None
Value
eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtuIjoicHJvZC1hdXRoLWRlZmF1bHQtdG9rZW4tdjIifQ.eyJ1dWlkIjoiNjhiMDY5YTUtNGU2MC0yYmFmLTIxODItMmUyNDdlYjg0YjlmIiwiZ2lkIjoiVF8wZTk4YTUxMjZ6YjExOTYwX3V0MDU4ZnVndjliNjZhMTEifQ.BEsM1uqhQGJMUKPzQZtY_BjmSB_cmg6s_Y3aBKQjkuGyMye_zN57lsX2ncRd7ie65GfqVjmJQ3ZgHppcZbHATuaIVotLMT2VgrfUDuJ-Tw0vKmz1Y2a5ouluT_b7f-jYmzJJ56ktywTG6NXqrxtyM_00zYQHun6RBQr31v6kdvFSS-2nbzEg12Renr4JrhbuU2kXVdjutu5sTIzfFcoGpDIl0lCrwxvZWQVfmEYU_r1ELEPIKXeG8HkV8cTIM8xj-gANr1OTTfrLQyYWh4pDiMnjOXfnewy7eK57rPbORIFB6J1y5l-EWOmhI4SszP_D_6zeOkXDyHNUuLTsAMdK_w
Expires:8/28/2026
perm_id
.myheritage.com
Secure None
Value
T_0e98a5126zb11960_ut058fugv9b66a11
Expires:8/28/2026
incap_ses_4558_292987
.myheritage.com
Secure None
Value
eHUEMJz4Gy/iPzozDUVBP6RpsGgAAAAAlAPBfJ4rQEFk20LaOw8tmw==
Expires:Session
LVTS
.myheritage.com
Secure None
Value
1756391845
Expires:8/28/2026
lang
.myheritage.com
Secure None
Value
EN
Expires:8/28/2026
PHPSESSID
.myheritage.com
Value
[PHPSESSID redacted]
Expires:Session
visid_incap_292987
.myheritage.com
HttpOnly Secure None
Value
JE9ro5E1ReCLwfjN3Etxg6RpsGgAAAAAQUIPAAAAAACf5DEkbggUuu6AldqKb64U
Expires:8/28/2026
External Links 8
Untitled Link
www.nytimes.com
Target URL
https://www.nytimes.com/2018/03/01/science/cousins-marriage-family-tree.html
Untitled Link
techcrunch.com
Target URL
https://techcrunch.com/2018/01/22/myheritage-says-it-sold-over-1m-dna-kits-last-year-annual-revenue-grew-to-133m/
Untitled Link
abcnews.go.com
Target URL
https://abcnews.go.com/Lifestyle/woman-meets-birth-mother-1st-time-30-years/story?id=51173564
Untitled Link
insider.foxnews.com
Target URL
http://insider.foxnews.com/2017/06/22/woman-finds-mom-mothers-day-my-heritage
www.facebook.com
Target URL
https://www.facebook.com/myheritage
twitter.com
Target URL
https://twitter.com/MyHeritage
Knowledge Base
education.myheritage.com
Target URL
https://education.myheritage.com/
Blog
blog.myheritage.com
Target URL
https://blog.myheritage.com
Requested Domains 7
accounts.google.com
Unknown Type
No category information available
appleid.cdn-apple.com
Unknown Type
No category information available
cf.mhcache.com
Unknown Type
No category information available
myheritage.com
Unknown Type
No category information available
www.google.com
Unknown Type
No category information available
www.gstatic.com
Unknown Type
No category information available
www.myheritage.com
Unknown Type
No category information available