Server | nginx/1.12.1 |
Content-Type | text/html; charset=utf-8 |
Transfer-Encoding | chunked |
Connection | keep-alive |
X-Frame-Options | SAMEORIGIN |
X-XSS-Protection | 1 |
X-Content-Type-Options | nosniff |
ETag | W/"87151824e062c70c9274c22ff7c4eed0" |
Cache-Control | max-age=0, private, must-revalidate |
X-Request-Id | fb49be05-5cb6-461f-96c1-fdf5bff1c76b |
X-Runtime | 0.029154 |
Content-Security-Policy-Report-Only | worker-src 'self'; style-src 'self' 'unsafe-inline'; script-src wss://*.intercom.io 'unsafe-inline' https://*.intercom.io https://*.intercomcdn.com https://*.polyfill.io https://*.newrelic.com https://*.nr-data.net https://*.google-analytics.com https://*.mxpnl.com 'unsafe-eval' 'self'; connect-src wss://*.intercom.io 'self' https://*.intercom.io https://*.mixpanel.com wss://otcbtc.com; object-src 'self'; img-src https://*.intercomcdn.com data: https://*.s3.amazonaws.com https://*.google-analytics.com https://*.intercomassets.com 'self'; media-src 'self' https://*.intercomcdn.com; child-src 'self'; frame-src 'self'; manifest-src 'self'; font-src 'self' https://*.intercomcdn.com; report-uri https://reports-api.sqreen.io/browser/v0/csp-violations/csp_380308f7357f4379986f19f885c5c61c; default-src 'self' |
X-Protected-By | Sqreen |
Referrer-Policy | no-referrer-when-downgrade |
Vary | Origin |
Content-Encoding | gzip |