Dfi-america.com

server: nginx
date: Tue, 15 Sep 2026 20:04:33 GMT
content-type: text/html; charset=iso-8859-1
content-length: 227
location: https://us.dfi.com/
x-cache-nxaccel: BYPASS

HTTP/2 302 
date: Tue, 15 Sep 2026 20:04:34 GMT
content-type: text/html
content-length: 0
location: https://www.dfi.com/
x-azure-ref: 20260915T200434Z-15685f69c4ddc4rvhC1GVA7x2n0000001dag00000000138a
x-cache: CONFIG_NOCACHE

HTTP/2 200 
date: Tue, 15 Sep 2026 20:04:35 GMT
content-type: text/html; charset=utf-8
content-length: 37612
content-encoding: deflate
vary: Accept-Encoding
x-html-minification-powered-by: WebMarkupMin
strict-transport-security: max-age=31536000;includeSubDomains; preload
content-security-policy: default-src 'self' data: *.dfi.com;                                                            img-src 'self' data: *.dfi.com *.google-analytics.com *.googleapis.com *.gstatic.com *.linkedin.com *.lfeeder.com *.google.com *.google.com.tw *.ytimg.com *.doubleclick.net *.hubspot.com *.hsforms.com *.hubspotusercontent10.net *.googletagmanager.com *.zoominfo.com *.hotjar.com *.hotjar.io *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io cdn.pushcrew.com;                                                             frame-src 'self' *.dfi.com *.google.com *.googletagmanager.com *.youtube.com *.youtube-nocookie.com *.linkedin.com *.hubspot.com *.doubleclick.net *.infogram.com js.driftt.com 8330016.hs-sites.com dfi-8330016.hs-sites.com www.youtube.com *.visualwebsiteoptimizer.com app.vwo.com;                                                             style-src 'self' 'unsafe-hashes' 'unsafe-inline' *.dfi.com *.googleapis.com *.gstatic.com *.doubleclick.net *.cloudflare.com *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com;                                                            font-src 'self' *.dfi.com *.gstatic.com *.doubleclick.net;                                                             script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.dfi.com www.dfi-itox.com *.google.com *.google-analytics.com *.googleapis.com www.gstatic.com *.linkedin.com *.cloudflare.com onesignal.com *.onesignal.com *.infogram.com js.hs-scripts.com www.googletagmanager.com snap.licdn.com lftracker.leadfeeder.com js.hs-banner.com js.hscollectedforms.net js.hs-analytics.net js.hsleadflows.net *.hsadspixel.net *.hubspot.com www.googleadservices.com www.youtube.com  *.doubleclick.net geolocation-db.com *.hs-scripts.com js.usemessages.com *.zoominfo.com js.driftt.com *.hotjar.com *.hotjar.io *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com;                                                             connect-src 'self' *.dfi.com *.hubspot.com  *.hsforms.com *.hubapi.com *.google.com *.google-analytics.com *.googleapis.com *.doubleclick.net *.infogram.com ws.zoominfo.com cdn.linkedin.oribi.io forms.hscollectedforms.net *.hotjar.com *.hotjar.io px.ads.linkedin.com ws.hotjar.com www.dfi.com www.dfi.com.tw dfi.com *.visualwebsiteoptimizer.com app.vwo.com;                                                             frame-ancestors 'self' www.dfi.com www.dfi.com.tw dfi.com;
feature-policy: camera 'none'
permissions-policy: fullscreen=()
referrer-policy: origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-azure-ref: 20260915T200434Z-1565ddfc985bkkp2hC1ZRHgad40000000ktg000000001egv
x-cache: CONFIG_NOCACHE
accept-ranges: bytes