| Server | nginx/1.10.0 |
| Content-Type | text/html; charset=utf-8 |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| X-Powered-By | Express |
| Access-Control-Allow-Origin | * |
| Access-Control-Allow-Credentials | true |
| Access-Control-Allow-Methods | GET, POST, DELETE, PUT |
| Access-Control-Allow-Headers | X-Requested-With, Content-Type, Authorization, deviceId, appVersion, sdkVersion, appKey |
| ETag | W/"-924576853" |
| Strict-Transport-Security | max-age=63072000; includeSubdomains; preload |
| X-Frame-Options | DENY |
| Public-Key-Pins | pin-sha256="/T/RWcZVWXivA+v6/OEXbKZ1BMXpZiV4KSegOHu+wuY="; max-age=2592000; includeSubDomains |
| Content-Encoding | gzip |