HTTP Headers Analysis for https://projectcircuitbreaker.com

Detected Technologies from Headers

See all in URL Inspect 21

AWS CloudFront

Gravatar

YouTube

Akamai Active incidents

Apache

Brightcove

Facebook

Google AdSense

Google API JS Client

Google DoubleClick

Google Static File Front End

Google Tag Manager

Hotjar

HubSpot Forms

jsDelivr

OneTrust

PHP

StackAdapt

Twitter

Google Cloud

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000 ; includeSubDomains ; preload

Content-Security-Policy

Basic

default-src; script-src; style-src; +11 more Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Present

SAMEORIGIN, DENY

X-Content-Type-Options

Present

nosniff, nosniff

Referrer-Policy

Good

strict-origin-when-cross-origin

Permissions-Policy

Present

accelerometer=(), autoplay=(), camera=(); +19 more

Recommendations

• Improve CSP by adding more specific directives and removing 'unsafe-inline'

Performance Headers

Connection

Performance

close, Transfer-Encoding

Transfer-Encoding

Performance

chunked

Vary

Performance

origin

connection: close, Transfer-Encoding
transfer-encoding: chunked
vary: origin

Caching Headers

Cache-Control

Caching

no-cache

Expires

Caching

Tue, 28 Apr 2026 19:02:28 GMT

Pragma

Caching

no-cache

cache-control: no-cache
expires: Tue, 28 Apr 2026 19:02:28 GMT
pragma: no-cache

Content Headers

Content-Type

Content

text/html; charset=UTF-8

content-type: text/html; charset=UTF-8

Server Headers

Server

Apache

server: Apache

CORS Headers

Access-Control-Allow-Headers

Cors

Content-Type, Authorization

Access-Control-Allow-Methods

Cors

GET,POST

Access-Control-Allow-Origin

Cors

*

Access-Control-Max-Age

Cors

1800

access-control-allow-headers: Content-Type, Authorization
access-control-allow-methods: GET,POST
access-control-allow-origin: *
access-control-max-age: 1800

Cookies Headers

Set-Cookie

Cookies

set-cookie: PHPSESSID=2uhr8kkce2fmfrheicu1lc3tmt; path=/; secure; HttpOnly
PHPSESSID=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; secure; HttpOnly
PHPSESSID=1sncgve402lq1novnfe4t08r0d; path=/; secure; HttpOnly
PHPSESSID=p3sqmmunb51bp166314bnluatm; path=/; secure; HttpOnly
AWSELB=05B1FF250CDD576B699A8E1523CF911FEAB7C2165E4285F520C82A33A63ECC949BF6614B79C852B090AF4B83B7C9EBC1491DA166E143528DA25CC4E087CBB59CA34A2D8EFE;PATH=/;MAX-AGE=900
AWSELBCORS=05B1FF250CDD576B699A8E1523CF911FEAB7C2165E4285F520C82A33A63ECC949BF6614B79C852B090AF4B83B7C9EBC1491DA166E143528DA25CC4E087CBB59CA34A2D8EFE;PATH=/;MAX-AGE=900;SECURE;SAMESITE=None

Other Headers

Cross-Origin-Embedder-Policy-Report-Only

Other

unsafe-none; report-to='default'

Cross-Origin-Opener-Policy-Report-Only

Other

unsafe-none; report-to='default'

Date

Other

Tue, 28 Apr 2026 19:02:28 GMT

Front-End-Https

Other

on

Link

Other

URL https://www.projectcircuitbreaker.com/wp-json/

rel=https://api.w.org/

URL https://www.projectcircuitbreaker.com/wp-json/wp/v2/pages/2

rel=alternate title=JSON type=application/json

URL https://www.projectcircuitbreaker.com/

rel=shortlink

X-Content-Security-Policy

Other

default-src 'self'; img-src *; media-src * data:;

X-Dns-Prefetch-Control

Other

on

X-Forwarded-Proto

Other

https

X-Forwarded-Protocol

Other

https

X-Forwarded-Ssl

Other

on

X-Grn

Other

0.990c0317.1777402947.27e5e858

X-Permitted-Cross-Domain-Policies

Other

none

X-Url-Scheme

Other

https

Xdomainrequestallowed

Other

0

cross-origin-embedder-policy-report-only: unsafe-none; report-to='default'
cross-origin-opener-policy-report-only: unsafe-none; report-to='default'
date: Tue, 28 Apr 2026 19:02:28 GMT
front-end-https: on
link: <https://www.projectcircuitbreaker.com/wp-json/>; rel="https://api.w.org/", <https://www.projectcircuitbreaker.com/wp-json/wp/v2/pages/2>; rel="alternate"; title="JSON"; type="application/json", <https://www.projectcircuitbreaker.com/>; rel=shortlink
x-content-security-policy: default-src 'self'; img-src *; media-src * data:;
x-dns-prefetch-control: on
x-forwarded-proto: https
x-forwarded-protocol: https
x-forwarded-ssl: on
x-grn: 0.990c0317.1777402947.27e5e858
x-permitted-cross-domain-policies: none
x-url-scheme: https
xdomainrequestallowed: 0

Recommendations

Enable compression (gzip/brotli) to improve performance