Xreal.com

Server: Tengine
Date: Wed, 17 Apr 2024 21:37:12 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=15
BackendServer: Aliyun URL Forwarding Server
Location: https://www.xreal.com

HTTP/2 200 
content-type: text/html
date: Wed, 17 Apr 2024 11:59:42 GMT
last-modified: Mon, 15 Apr 2024 07:49:52 GMT
etag: W/"7f03a7663814b0ff181b68c57a9fd59a"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 da8cb5b9fb94d7de03d8eaa20297debc.cloudfront.net (CloudFront)
x-amz-cf-pop: JFK52-P1
x-amz-cf-id: WEmu6wG_uPyUNG1hBUutF054M4j7g5lAuIbVY_cs2KwOT-8206GBoA==
age: 34651
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
content-security-policy: upgrade-insecure-requests;base-uri 'self'; default-src 'self' blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net static.ads-twitter.com connect.facebook.net analytics.tiktok.com assets-cli.s5.udesk.cn xreal.s5.udesk.cn blob: https://basevistor.s5.udesk.cn d.line-scdn.net cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js cdnjs.cloudflare.com/ajax/libs/jsencrypt/2.3.1/jsencrypt.js *.xreal.com design-minio-test.xreal.work:9000; style-src 'self' 'unsafe-inline' xreal.s5.udesk.cn fonts.googleapis.com; object-src none; form-action 'self' www.facebook.com; font-src 'self' fonts.gstatic.com www.googletagmanager.com data: ; connect-src 'self' *.nreal.ai *.nreal.cn *.xreal.com https://design-minio-test.xreal.work:9000 analytics.google.com pagead2.googlesyndication.com analytics.tiktok.com stats.g.doubleclick.net manage.kmail-lists.com *.nreal.work *.sentry.io data: https://basevistor.s5.udesk.cn wss://basevistor.s5.udesk.cn https://www.google-analytics.com; img-src 'self' *.nreal.ai *.nreal.cn *.xreal.com https://design-minio-test.xreal.work:9000 www.google.com.hk www.google.com www.google-analytics.com www.googletagmanager.com analytics.twitter.com t.co/1/i/adsct www.facebook.com s5-cs-pub-std.oss-ap-southeast-1.aliyuncs.com xreal.s5.udesk.cn blob: data: ; style-src-elem 'self' 'unsafe-inline' xreal.s5.udesk.cn fonts.googleapis.com blob: ; frame-src 'self' *.nreal.ai *.nreal.cn *.xreal.com  https://design-minio-test.xreal.work:9000 td.doubleclick.net xreal.s5.udesk.cn www.facebook.com; media-src 'self' *.nreal.ai *.nreal.cn *.xreal.com https://design-minio-test.xreal.work:9000; frame-ancestors 'self'; manifest-src 'self';
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
vary: Origin