PUBLIC OBSERVATION · V1Wed, Aug 26, 2026 12:05 AM
Link Behavior Trace
https://www.consumerreports.org/home-garden/toilets/best-smart-toilets-a5030436405/
Observed result
High-risk signals observed
100% observation completeness
SIGNATURE COMPONENT
LINK BEHAVIOR TRACE
0 transition(s)1
Final
www.consumerreports.org
https://www.consumerreports.org/home-garden/toilets/best-smart-toilets-a5030436405/
Observed signals
6 recordedCredential form posts to another host
HIGH
Directly observed form relationship
Embedded frame observed from a different domain
LOW
Observed page structure
Response cookie observed without the Secure attribute on an HTTPS page
LOW
Observed response headers
Response cookie observed without the HttpOnly attribute
INFO
Observed response headers
Response cookie observed without a SameSite attribute
INFO
Observed response headers
Credential input field observed
INFO
Observed landing-page form
Landing behavior
Observed responseHTTP status200
Content typetext/html
Forms2
Password inputs1
External domains14
Binary responseNo
Observed form destinations
secure.consumerreports.org
Security header configuration
WeakRecommended headers observed3 / 6
Present
strict-transport-securityx-content-type-optionspermissions-policy
Not observed
content-security-policyx-frame-optionsreferrer-policy
Response cookies observed
2 cookie(s) observed — 2 without Secure, 2 without HttpOnly, 2 without a SameSite attribute. Cookie names and values are never observed or stored by this scan.
Configuration, not a security guarantee. This describes which response headers were observed, not whether the site is otherwise secure — a "strong" grade means these specific headers were present, nothing more.