Flyerbox.ca

server: nginx
date: Fri, 15 Sep 2023 12:57:02 GMT
content-type: text/html
content-length: 162
location: https://www.flyerbox.ca/
x-content-type-options: nosniff

HTTP/2 200 
server: nginx
date: Fri, 15 Sep 2023 12:57:02 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=h7cbt3tv78oonvosi5b1p5g173; path=/; secure; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: SrvCch=0; expires=Sat, 14-Sep-2024 12:40:24 GMT; Max-Age=31536000; path=/
x-powered-by: Hyperia
x-frame-options: DENY
x-content-type-options: nosniff
strict-transport-security: max-age=10; includeSubDomains
feature-policy: accelerometer 'self'; ambient-light-sensor 'self'; autoplay 'self'; battery 'self'; camera 'self'; display-capture 'self'; document-domain 'self'; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; gyroscope 'self'; layout-animations 'self'; magnetometer 'self'; microphone 'self'; midi 'self'; oversized-images 'self'; payment 'self'; picture-in-picture *; publickey-credentials-get 'self'; sync-xhr 'self'; usb 'self'; wake-lock 'self'; xr-spatial-tracking 'self'
permissions-policy: accelerometer=(self), ambient-light-sensor=(self), autoplay=(self), battery=(self), camera=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), layout-animations=(self), magnetometer=(self), microphone=(self), midi=(self), oversized-images=(self), payment=(self), picture-in-picture=(*), publickey-credentials-get=(self), sync-xhr=(self), usb=(self), wake-lock=(self), xr-spatial-tracking=(self)
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 1; mode=block; report=https://hyperia.report-uri.com
report-to: []
content-security-policy: default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; connect-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; font-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; frame-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; img-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' * data:; manifest-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; object-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; prefetch-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; script-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; style-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; media-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; form-action 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *; worker-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' * blob:; report-uri https://hyperia.report-uri.com; block-all-mixed-content; upgrade-insecure-requests
access-control-allow-credentials: true
set-cookie: _csrf=81630d976b3526a445b0409ef7f583e8d6d5f6ec8049869ebe606be8f668b82fa%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22gR_bpX4KDBuNTWt5Tvm1B9SbqUvjUyZb%22%3B%7D; path=/; secure; HttpOnly; SameSite=Lax
vary: Accept-Encoding
x-upstream-backend: letakomat-sfo2-w002
x-proxy-cache: HIT
x-proxy-date: Fri, 15 Sep 2023 12:40:24 GMT
x-proxy-date-now: Friday, 15-Sep-2023 12:57:02 GMT
x-proxy-cache-type: nl30m
content-encoding: br