Pixlee.co - Photos.pixlee.co

p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
report-to: { "group": "csp", "max-age": 10886400, "endpoints": [{ "url": "https://sentry.io/api/1227414/security/?sentry_key=a8d877c6035547e193eff7baa44c7501;" }] }
x-permitted-cross-domain-policies: none
server: Cowboy
via: 1.1 vegur, 1.1 varnish, 1.1 varnish, 1.1 varnish
content-security-policy: default-src http: https:;script-src *.kube.pixlee.io *.dev.pixlee.com:9001 *.feedshop.net *.pxlecdn.com *.pixlee.gallery *.pixleeteam.com data: *.nanovisor.io http://photos.test localhost:8000 http://photos.pixlee.test *.pixlee.com *.pixlee.co *.pixlee.io https://cdn.ravenjs.com https://browser.sentry-cdn.com cdnjs.cloudflare.com https://*.cloudfront.net *.pusher.com *.pinterest.com *.googleapis.com https://api-ssl.bitly.com *.google-analytics.com graph.instagram.com connect.facebook.net googletagmanager.com pixlee.gallery https://*.tiktok.com https://*.ibytedtos.com https://*.byteoversea.com https://*.tiktokcdn.com https://*.ttwstatic.com https://*.tiktokcdn-us.com 'unsafe-inline' 'unsafe-eval';style-src *.kube.pixlee.io *.dev.pixlee.com:9001 *.pixleeteam.com http://photos.test localhost:8000 http://photos.pixlee.test *.pixlee.com *.pixlee.co *.pixlee.io *.pxlecdn.com https://cdnjs.cloudflare.com fonts.googleapis.com graph.instagram.com https://*.tiktok.com https://*.ibytedtos.com https://*.byteoversea.com https://*.tiktokcdn.com https://*.ttwstatic.com https://*.tiktokcdn-us.com 'unsafe-inline';font-src http: https: data:;img-src *.kube.pixlee.io *.pixleeteam.com android-webview-video-poster: *.pixlee.com *.pixlee.co *.pixlee.io *.pxlecdn.com http: https: data: blob:;connect-src *.kube.pixlee.io *.dev.pixlee.com:9001 *.feedshop.net *.pxlecdn.com *.pixlee.gallery *.pixleeteam.com *.nanovisor.io *.pixlee.com *.pixlee.co *.pixlee.io *.pixlee.test localhost:8000 distillery.test photos.test *.pixleeteam.com:9000 *.pixleeteam.com:9001 ws://*.pixlee.com wss://*.pixlee.com ws://*.pixlee.co wss://*.pixlee.co ws://*.pxlecdn.com wss://*.pxlecdn.com *.pusherapp.com ws://*.pusherapp.com wss://*.pusherapp.com https://api-ssl.bitly.com *.facebook.com pixlee-staging-distillery.herokuapp.com s3.amazonaws.com youtube.com sentry.io code.jquery.com *.googleapis.com pixlee-backstage-analytics.herokuapp.com https://*.tiktok.com https://*.ibytedtos.com https://*.byteoversea.com https://*.tiktokcdn.com https://*.ttwstatic.com https://*.tiktokcdn-us.com;report-to csp;report-uri https://sentry.io/api/1227414/security/?sentry_key=a8d877c6035547e193eff7baa44c7501
x-runtime: 0.003887
location: https://www.pixlee.com
referrer-policy: strict-origin-when-cross-origin
accept-ranges: bytes
x-xss-protection: 1; mode=block
x-request-id: 01af9644-de2f-4b41-aa26-d55e064f12b0
x-content-type-options: nosniff
x-download-options: noopen
content-type: text/html; charset=utf-8
cache-control: max-age=300,s-maxage=300
date: Fri, 02 Jun 2023 00:59:41 GMT
x-served-by: cache-iad-kiad7000149-IAD, cache-iad-kjyo7100042-IAD, cache-bur-kbur8200178-BUR
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
x-timer: S1685667581.044551,VS0,VE191
vary: Origin
true-client-ip: 67.212.187.106
strict-transport-security: max-age=31557600

HTTP/2 200 
date: Fri, 02 Jun 2023 00:59:41 GMT
content-type: text/html
content-length: 12940
content-encoding: gzip
content-security-policy: frame-ancestors 'self'
x-frame-options: SAMEORIGIN
accept-ranges: bytes
age: 2345
x-served-by: cache-iad-kcgs7200166-IAD
x-cache: HIT
x-cache-hits: 2
x-timer: S1685667582.529054,VS0,VE0
vary: x-wf-forwarded-proto, Accept-Encoding
x-cluster-name: us-east-1-prod-hosting-red