recovery.pr Review

 N/A

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://recovery.pr/
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Mon, 25 Aug 2025 19:37:46 GMT
Content-Length: 143

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://recovery.pr.gov/
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Mon, 25 Aug 2025 19:37:46 GMT
Content-Length: 147

HTTP/1.1 200 OK
Cache-Control: no-cache
Keep-Alive: timeout=5
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
ETag: W/"bf04-wKhWAPHD6mx5Js89N8n2Bcd2fXA"
Vary: Accept-Encoding
Server: 
Content-Security-Policy: default-src 'self';media-src 'self' https://*.recovery.pr.gov https://recovery.pr.gov https://www.youtube.com;script-src 'self' 'unsafe-eval' 'nonce-Zfy/pB07BLrI6xokJpxbHA==' https://js.arcgis.com https://*.arcgis.com https://static.arcgis.com https://www.googletagmanager.com https://www.google-analytics.com https://devarcgis.recovery.pr https://arcgis.recovery.pr https://www.google.com https://www.gstatic.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://js.arcgis.com https://*.arcgis.com https://static.arcgis.com https://fonts.googleapis.com;img-src 'self' data: blob: https://*.arcgis.com https://js.arcgis.com https://static.arcgis.com https://services.arcgisonline.com https://www.google-analytics.com https://www.googletagmanager.com https://devarcgis.recovery.pr https://arcgis.recovery.pr https://*.recovery.pr.gov https://services.arcgisonline.com;connect-src 'self' https://*.arcgis.com https://static.arcgis.com https://www.google-analytics.com https://www.googletagmanager.com https://devarcgis.recovery.pr https://arcgis.recovery.pr https://services.arcgisonline.com https://www.google.com;font-src 'self' https://js.arcgis.com https://*.arcgis.com https://static.arcgis.com https://fonts.gstatic.com https://fonts.googleapis.com;worker-src 'self' blob:;child-src 'self' blob:;frame-src 'self' https://www.youtube.com https://youtube.com https://www.google.com;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';upgrade-insecure-requests
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-site
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0
Permissions-Policy: geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), fullscreen=(), payment=(), accelerometer=(), usb=()
Access-Control-Allow-Credentials: true
Cross-Origin-Embedder-Policy: unsafe-none
Access-Control-Expose-Headers: rowcount, obligatedTotal, disbursedTotal, costShareTotal, approvedTotal, federalTotal, nonFederalTotal, allocatedTotal, homeRepairedTotal, noActiveRfp, approximateCost, projectCostTotal
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
X-Powered-By: 
X-Powered-By: 
Date: Mon, 25 Aug 2025 19:37:49 GMT
Content-Length: 10394