| Content-Encoding | gzip |
| Cache-Control | max-age=0, private, must-revalidate |
| Content-Security-Policy | default-src blob:; base-uri 'self' ci-store-sticker.s3.amazonaws.com ci-store-avatar.s3.amazonaws.com ci-store-photo.s3.amazonaws.com; block-all-mixed-content; child-src 'self' blob:; connect-src 'self' vod.nood.tv vod-hls.nood.tv live-hls.nood.tv ci-store-movie.s3.amazonaws.com ci-store-sticker.s3.amazonaws.com ci-store-avatar.s3.amazonaws.com ci-store-photo.s3.amazonaws.com *.pusher.com wss://ws.pusherapp.com; font-src 'self' data:; form-action 'self' secure.verotel.com; frame-ancestors 'none'; img-src 'self' blob: data: assets.nood.tv twemoji.maxcdn.com; media-src 'self' blob: *.nood.tv; object-src 'self'; plugin-types application/x-shockwave-flash; script-src 'self' 'unsafe-eval' assets.nood.tv; style-src 'self' 'unsafe-inline'; report-uri https://nood.report-uri.io/r/default/csp/enforce |
| Content-Type | text/html; charset=utf-8 |
| Etag | W/"2d54c61630c5435ed127af5a3cdf9b82" |
| Public-Key-Pins | max-age=3600; pin-sha256="WAdoUklycs/b6pBt3PAfjJDDEut36vST5py+/WqAuuo="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="UGM/e0R81g8SXlCopsEqCI+4rRGtAmkTZ1oZA6Jvtqc="; report-uri="https://nood.report-uri.io/r/default/hpkp/enforce"; includeSubDomains |
| Referrer-Policy | origin-when-cross-origin |
| Server | Cowboy |
| Strict-Transport-Security | max-age=631152000 |
| Vary | Accept-Encoding |
| Via | 1.1 vegur |
| X-Content-Type-Options | nosniff |
| X-Download-Options | noopen |
| X-Frame-Options | DENY |
| X-Permitted-Cross-Domain-Policies | none |
| X-Request-Id | cbb7dfcb-7aff-4f0c-adc1-228d9e56642e |
| X-Runtime | 0.522834 |
| X-Xss-Protection | 1; mode=block |
| Transfer-Encoding | chunked |