HTTP Headers Analysis for https://blog.fireblocks.com

Detected Technologies from Headers

See all in URL Inspect 15

Adobe Fonts (Typekit)

Chili Piper

Cloudflare CDN

Google Analytics

Google DoubleClick

Google Fonts

Google Tag Manager

Greenhouse

HubSpot

HubSpot Analytics

jsDelivr

Navattic

Sentry

WP Engine

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=63072000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured

X-Frame-Options

Good

SAMEORIGIN

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Present

origin

Permissions-Policy

Present

geolocation=(),midi=(),sync-xhr=(), microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks

Performance Headers

3 headers

Connection

Performance

close

Transfer-Encoding

Performance

chunked

Vary

Performance

Accept-Encoding,Cookie

Caching Headers

1 headers

Cache-Control

Caching

max-age=600, must-revalidate

Content Headers

1 headers

Content-Type

Content

text/html; charset=UTF-8

Server Headers

2 headers

Server

cloudflare

X-Powered-By

Server

WP Engine

CORS Headers

0 headers

No CORS headers found

Cookies Headers

1 headers

Set-Cookie

Cookies

__cf_bm=r3i7l_5Icza1GPbVpfugHf2kLWi9P6eSYpmLksnwZC0-1771185959-1.0.1.1-t6ib7xrXr3yj3N4kGCHg_aHudDdIpsmtSbj0tIcFLFXxq0aXl_Z.usV0bHVIhUyNkjlqQ8m79GFUWqQG4h1DAQtGhlhFuWnCCQQSJk1j9GY; path=/; expires=Sun, 15-Feb-26 20:35:59 GMT; domain=.www.fireblocks.com; HttpOnly; Secure; SameSite=None

Other Headers

9 headers

Alt-Svc

Other

h3=":443"; ma=86400

Cf-Cache-Status

Other

DYNAMIC

Cf-Ray

Other

9ce76c58dbd328ae-IAD

Content-Security-Policy-Report-Only

Other

default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://use.typekit.net https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://b.6sc.co https://j.6sc.co https://ajax.googleapis.com https://js.navattic.com https://cdn.cookielaw.org https://static.ads-twitter.com https://unpkg.com https://js.hsforms.net https://js.hs-scripts.com https://js.hs-banner.com https://js.hs-analytics.net https://js.hsadspixel.net https://js.hubspot.com https://snap.licdn.com https://www.google.com https://www.gstatic.com https://googleads.g.doubleclick.net https://boards.greenhouse.io https://fireblocks.chilipiper.com https://tracking.g2crowd.com https://cdnjs.cloudflare.com https://fast.wistia.com https://fast.wistia.net https://browser.sentry-cdn.com https://d3js.org; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://use.typekit.net https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://b.6sc.co https://j.6sc.co https://ajax.googleapis.com https://js.navattic.com https://cdn.cookielaw.org https://static.ads-twitter.com https://unpkg.com https://js.hsforms.net https://js.hs-scripts.com https://js.hs-banner.com https://js.hs-analytics.net https://js.hsadspixel.net https://js.hubspot.com https://snap.licdn.com https://www.google.com https://www.gstatic.com https://googleads.g.doubleclick.net https://boards.greenhouse.io https://fireblocks.chilipiper.com https://tracking.g2crowd.com https://cdnjs.cloudflare.com https://fast.wistia.com https://fast.wistia.net https://browser.sentry-cdn.com https://d3js.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net https://cdn.cookielaw.org https://code.jquery.com; img-src 'self' data: https: https://www.google-analytics.com; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net https://fast.wistia.com https://fast.wistia.net; connect-src 'self' https://www.google-analytics.com https://b.6sc.co https://c.6sc.co https://ipv6.6sc.co https://analytics.google.com https://www.google.com https://cdn.cookielaw.org https://forms.hsforms.com https://api.hubapi.com https://cta-service-cms2.hubspot.com https://px.ads.linkedin.com https://tracking-api.g2.com https://stats.g.doubleclick.net https://fast.wistia.com https://fast.wistia.net https://embed-cloudfront.wistia.com https://distillery.wistia.com https://pipedream.wistia.com https://cdn.jsdelivr.net wss:; frame-src 'self' https://www.youtube.com https://fast.wistia.net https://forms.hsforms.com https://app.hubspot.com https://www.googletagmanager.com https://td.doubleclick.net https://fireblocks.chilipiper.com https://www.google.com https://capture.navattic.com https://job-boards.greenhouse.io https://lottie.host; media-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://forms.hsforms.com; upgrade-insecure-requests;

Date

Other

Sun, 15 Feb 2026 20:05:59 GMT

Link

Other

<https://www.fireblocks.com/wp-json/>; rel="https://api.w.org/"

X-Cache

Other

X-Cache-Group

Other

normal