Report for facebook.com Generated 2017-10-05T17:28:56Z

atwork.facebook.com

https://atwork.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:07:07 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0pg4LHAh7HMJAAT6X..BZ1ma7.eu.AAA.0.0.BZ1ma7.AWVrBLCT; expires=Wed, 03-Jan-2018 17:07:07 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=u2bWWYHR6kQ9DtRCBsl3iwbm; expires=Sat, 05-Oct-2019 17:07:07 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug fcxnVwHvVS4UIY1VSdtlKdpBw2XDGd0ZbLEAVTQ+25M9zZq6kGttWgn35kfUID1+T8HshpfjLo7QMy5bTXxQbA==
X-Frame-Options DENY
X-Xss-Protection 0
audience.facebook.com

http://audience.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:14:55 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=05HMGb9EJITISEJMS..BZ1miP.sl.AAA.0.0.BZ1miP.AWVkFz_H; expires=Wed, 03-Jan-2018 17:14:55 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=j2jWWU1ovirdMILSTANwFvN7; expires=Sat, 05-Oct-2019 17:14:55 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug ZzJ2bLYhwX5+Hw1WFovthMqwNoOM4WahcUDDSOxC3U4mkeaIB4rdgsHN/Z6YPP/ywwrQOI76Y81oX4h3BD0ROQ==
X-Frame-Options DENY
X-Xss-Protection 0
audience.facebook.com

https://audience.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:19:39 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0zqV6weZ23lOSdAwJ..BZ1mmr.2o.AAA.0.0.BZ1mmr.AWWdd6Dw; expires=Wed, 03-Jan-2018 17:19:39 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=q2nWWYgtERyNnXRqUPgwZUVu; expires=Sat, 05-Oct-2019 17:19:39 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug qu90Vqh/p65ePfc650k3bDmfWBxB3S3HBqymq8IdvEtcKRZKhR7NK9SOuCQXTJY9vfTocCIk+faaviQ2fdM9ug==
X-Frame-Options DENY
X-Xss-Protection 0
aufeminin.facebook.com

http://aufeminin.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://aufeminin.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:18:40 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug Let78XZ97SA4thvodWkqMxYGR/nIJjzpcKGkPFiWPOLOYelxgZ4f5NYSHZYkNonrFxRvkFpIs6KI4EA9ldnD9A==
X-Frame-Options DENY
X-Xss-Protection 0
aufeminin.facebook.com

https://aufeminin.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:59:25 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0m3ogHPB9ARcpIzwV..BZ1mTt.kT.AAA.0.0.BZ1mTt.AWUVAlHo; expires=Wed, 03-Jan-2018 16:59:25 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=7WTWWWeGCQp9rWg08O-_WkYN; expires=Sat, 05-Oct-2019 16:59:25 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug g5CoUQL9AUKg1L211RRaSdnMuVkSMCGcYMlD+PHdADp8U0ke90SIvkRfuOfnk72NTm8BP289voq04YGr8Z/8ew==
X-Frame-Options DENY
X-Xss-Protection 0
autoconfig.beta.facebook.com

https://autoconfig.beta.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:16:49 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0DF9lKeAgHa5gXypT..BZ1lrx.Ii.AAA.0.0.BZ1lrx.AWWvEgVS; expires=Wed, 03-Jan-2018 16:16:49 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=8VrWWUlNV46cryXcN2OTheLM; expires=Sat, 05-Oct-2019 16:16:49 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug ISb6jgxrh7gGWxoui+zqASguQdfn541vg4PxSz6Lbad1GtasDE/ccsGEQpPLa7Lq/6GSL4g9714hGFmyyE0Z+Q==
X-Frame-Options DENY
X-Xss-Protection 0
autoconfig.new.facebook.com

https://autoconfig.new.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:36:24 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0k3hffUSaUoH5wlFF..BZ1l-I.iS.AAA.0.0.BZ1l-I.AWV5ei_c; expires=Wed, 03-Jan-2018 16:36:24 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=iF_WWfYBizIHvBYFnI3jBxcW; expires=Sat, 05-Oct-2019 16:36:24 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug d6W9OgfQJcD7WTDCVUrfz/pHZ2+wM5EtLFQrio7yyRJngZ0/niiHM4dHjWeO1tJx/akLmf3zJbLaEX2P/Y/Dyw==
X-Frame-Options DENY
X-Xss-Protection 0
autoconfig.secure.facebook.com

http://autoconfig.secure.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:19:39 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
P3p CP="Facebook has no P3P policy fb.me/p3p"
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0KFDFy7pZjr5IjBEK..BZ1lub.HE.AAA.0.0.BZ1lub.AWVPxE_q; expires=Wed, 03-Jan-2018 16:19:39 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=m1vWWdBvyYp7vVbbnXIHqSAL; expires=Sat, 05-Oct-2019 16:19:39 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 4RQrVml4ZonV1Ep65i7UMn/a1bM3fOxtzot/6qFeUoFN1dlFnhUPu5ejGQrqW1uI7+u4jnM7V3HP9bz4kIOTYQ==
X-Frame-Options DENY
X-Xss-Protection 0
autoconfig.secure.facebook.com

https://autoconfig.secure.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:25:12 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0RPMLFvvcjiGU1qoA..BZ1mr4.i3.AAA.0.0.BZ1mr4.AWXEDOlN; expires=Wed, 03-Jan-2018 17:25:12 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=-GrWWVCHbsShRdZnRyazZaJJ; expires=Sat, 05-Oct-2019 17:25:12 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug mdbHiLB3/MBpqQjqIr4jyE5UKWbYBORFkz+n9siZh46jQnpQ8Eg5PBguO32ZNJdHA0od3J4PHCWU02JfFWisgA==
X-Frame-Options DENY
X-Xss-Protection 0
autodiscover.beta.facebook.com

https://autodiscover.beta.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:04:00 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0R4dznm12y6r0toIF..BZ1mYA.Xl.AAA.0.0.BZ1mYA.AWXBvqC2; expires=Wed, 03-Jan-2018 17:04:00 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=AGbWWTBJm_JYWqY_QmKxHBy3; expires=Sat, 05-Oct-2019 17:04:00 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug jXkoCiNMfCeM4KkQ85ktJufspQCAB5/zJRA/VaOE9jiBtWgG1sROYh3gvYgJVNYsOZ8NtEvrLAF4sdqqoBL2hQ==
X-Frame-Options DENY
X-Xss-Protection 0
autodiscover.new.facebook.com

https://autodiscover.new.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:28:21 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
P3p CP="Facebook has no P3P policy fb.me/p3p"
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0VEhFq7jal5ID1TIv..BZ1mu1.T8.AAA.0.0.BZ1mu1.AWWw87P0; expires=Wed, 03-Jan-2018 17:28:21 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=tWvWWd4lSarRC9bzMAEe5wrD; expires=Sat, 05-Oct-2019 17:28:21 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug XBwqg6zT1S/SDgxtwpmrlBqNj0wikTGTaoJCSRe0qXGj2+N3Q5wH9vIsaY8ViZcb2oJpOqkV0nCxumyRwESV/g==
X-Frame-Options DENY
X-Xss-Protection 0
autodiscover.secure.facebook.com

https://autodiscover.secure.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:35:28 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0EM9UWJUM23Lnul8a..BZ1l9Q.Mx.AAA.0.0.BZ1l9Q.AWVZo-_W; expires=Wed, 03-Jan-2018 16:35:28 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=UF_WWaDWg584H__Y86re0297; expires=Sat, 05-Oct-2019 16:35:28 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug /YXjCz+9PBLep0f50KSpD8EqQ/kaoh89cPKMuj93V/D+cuJW9LXRKWQGRfyYlmRPleVvTPseOQeKN3JGWiIWiw==
X-Frame-Options DENY
X-Xss-Protection 0
autodiscover.secure.facebook.com

http://autodiscover.secure.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:55:37 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0DsxSNxtfuucJBks2..BZ1mQJ.oW.AAA.0.0.BZ1mQJ.AWXh9J6S; expires=Wed, 03-Jan-2018 16:55:37 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=CWTWWQ6Ux4boCS1HEXFSvqKL; expires=Sat, 05-Oct-2019 16:55:37 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 4rcDKNQ+TTxWl5lrKWYSRrJYoF6uwqt06N91QxsRpKkO4i3P8J7Ls7/6bBge7WsPXl5ebbjw/KRs/eVk0Uur3w==
X-Frame-Options DENY
X-Xss-Protection 0
avalon.facebook.com

https://avalon.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:43:19 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0GaJTsHrRMRKWaGUd..BZ1mEn.jn.AAA.0.0.BZ1mEn.AWX7aV70; expires=Wed, 03-Jan-2018 16:43:19 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=J2HWWQMYLZXv7CuBzEk1nVuy; expires=Sat, 05-Oct-2019 16:43:19 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 8mmFuQywjFQtP9oVmG1Hm+u3mdIXR+eUaOhXctLVC3XwDhCcRGS95Q4uYhH2X3G9NSui8q0kC44EvoBcx2lOqA==
X-Frame-Options DENY
X-Xss-Protection 0
avalon.facebook.com

http://avalon.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://avalon.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:07:36 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug MJ35Z0U7/5iXZYw40DOGoWzJZ+bf529ahWKc4i1/UG8mErnsGj3E5DyAM2ZqIw/II9FY49o7xwV7SyRJ8oGU8A==
X-Frame-Options DENY
X-Xss-Protection 0
avant.facebook.com

http://avant.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://avant.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:54:43 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug bNqIPOfYac14nveS21M9TJaA8Qp4TzNTbBibeXNpn2cCQq5bLrtOjMOHft3BnhdsWOeIZnPZvh1bG5Cd++HhAA==
X-Frame-Options DENY
X-Xss-Protection 0
avant.facebook.com

https://avant.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:03:36 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
P3p CP="Facebook has no P3P policy fb.me/p3p"
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=013pQeJhQhGlgilXB..BZ1mXo.XL.AAA.0.0.BZ1mXo.AWUjtLEO; expires=Wed, 03-Jan-2018 17:03:36 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=6GXWWa0W4UtJuUleVfA8bRif; expires=Sat, 05-Oct-2019 17:03:36 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug WWfec9g7qKKeAakDXMJRa9FWRGYiZvnPFU7wI2jbGf4U30V6TY+Ekvt1f3QGGyXK/ELANjDdRnN6dgsDXJetjA==
X-Frame-Options DENY
X-Xss-Protection 0
avast.facebook.com

https://avast.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:22:15 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0JfKqnAZWjg6B9TFn..BZ1lw3.BW.AAA.0.0.BZ1lw3.AWUbKdx1; expires=Wed, 03-Jan-2018 16:22:15 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=N1zWWYv2UXyiBhw6B4a9b3W0; expires=Sat, 05-Oct-2019 16:22:15 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug CLBZzllaHFX6wNs0q+UekwxfP/UbTSIVS0/OWW3Cqo34pQ35Ni3GtyTFOi6c0QMcAVGb26kiFk+HlnLPYFDKVg==
X-Frame-Options DENY
X-Xss-Protection 0
avast.facebook.com

http://avast.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://avast.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:49:22 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug G7QYPFHXf+9SdDSkMmcg/hdgJ2WZ9VI/i26sWptQUWsejqKkE13LKGFoC6Iwo5WN4hYinBWgSt4GLvy3P4z4eg==
X-Frame-Options DENY
X-Xss-Protection 0
avianca.facebook.com

https://avianca.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:24:14 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0ejMA311eAJmQSSLZ..BZ1lyu.O6.AAA.0.0.BZ1lyu.AWUYbPAC; expires=Wed, 03-Jan-2018 16:24:14 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=rlzWWTmyoBp1U0u0qxSofv7i; expires=Sat, 05-Oct-2019 16:24:14 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug vfZxgfgyz+6cfoCS8PHvS0ji99dZI9SPS0VnuaNzPodRBJrxAVmoYwXVMFQsM4R1MHcw+gSsQtwkxjB3UMpz2w==
X-Frame-Options DENY
X-Xss-Protection 0
avianca.facebook.com

http://avianca.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://avianca.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:02:11 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug MnNk7jszuduRa0lo6DVIPmn5+C/sDiReZHeygNZ12bMsnJc8UAK9RXb19SUudMJJUPI93FrPDl1c9nwwuRsXjw==
X-Frame-Options DENY
X-Xss-Protection 0
awards.facebook.com

http://awards.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://awards.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:22:03 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug X3gk5JzGY+6b/J8wbEXjWHEaYf6dm+za8K6XPqCRDaboffJgJz+0cWIZGCXpOapBe/JeXLtNQ5JyVBDvci593Q==
X-Frame-Options DENY
X-Xss-Protection 0
awards.facebook.com

https://awards.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:16:07 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=05rlPY4va1BgeR0bq..BZ1mjX.YB.AAA.0.0.BZ1mjX.AWWD1LvR; expires=Wed, 03-Jan-2018 17:16:07 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=12jWWSgwPz3NT9oulnjs7SYS; expires=Sat, 05-Oct-2019 17:16:07 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug pM9VqtF2ZGTfZyDFJpKwcgiE74Jao46l10QE4wbeVoY8pFAbICmd49FY+uOwc1xnNgipyN/ttR03QcQ0QBW/ng==
X-Frame-Options DENY
X-Xss-Protection 0
axa.facebook.com

https://axa.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:37:36 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=07VmpYiwXqKmuMzJa..BZ1l_P.H1.AAA.0.0.BZ1l_P.AWUe6ZAO; expires=Wed, 03-Jan-2018 16:37:35 GMT; Max-Age=7775999; path=/; domain=.facebook.com; secure; httponly sb=z1_WWayH8kOzsRfG3Gzaw5dQ; expires=Sat, 05-Oct-2019 16:37:35 GMT; Max-Age=63071999; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug D72zcIzAsDiXHLcFVmKjdpGjULqvDf5NnkvGS0KmL4Y7dKUmICaVVaMhVckVWmTlTPTaIAQW/OA/ePvVRzwsNg==
X-Frame-Options DENY
X-Xss-Protection 0
axa.facebook.com

http://axa.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://axa.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:18:13 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug V9349qjwecoJTUW9Nnm20rXazoRcn6PzZxF/7dji6XaJbBXV2JAGPzdA97Cai7P4TAIRSSH7FKYOoyMwUQnT/A==
X-Frame-Options DENY
X-Xss-Protection 0
axactor.facebook.com

https://axactor.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:55:11 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0eTBvWkGY4Ro8CuOh..BZ1mPv.6n.AAA.0.0.BZ1mPv.AWUoOqmm; expires=Wed, 03-Jan-2018 16:55:11 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=72PWWdAcdQm9OV7XOnpkYRds; expires=Sat, 05-Oct-2019 16:55:11 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug IMbh1/dHZoLYQCuPnf/b+CeiFkTJDDbdcKufQrfm/+csip2aMkKE8Z/XpaPz6eB43UZf4iW1NyNaPEitPRuOMQ==
X-Frame-Options DENY
X-Xss-Protection 0
axactor.facebook.com

http://axactor.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://axactor.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:25:15 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 4Rql04eADBz03wXNvD47bXXsflVAQP8mA5R8acQckDEDMnxK1hNwtErZVdZzHwvoLgvgRgZ/twa7bx0HRCP9VQ==
X-Frame-Options DENY
X-Xss-Protection 0
axiata.facebook.com

http://axiata.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://axiata.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:17:38 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug +6BS5ZTvEz82DoYTvRESaVfwW4Q6LYJ2+AUoNmWeLeuT+ysqkUVDZxcuQBkNlmlnv7Gn6AikgscpRrZrQuouIA==
X-Frame-Options DENY
X-Xss-Protection 0
axiata.facebook.com

https://axiata.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:24:22 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0GKjKR7bLQe2o9XSg..BZ1mrG.8m.AAA.0.0.BZ1mrG.AWWBafc4; expires=Wed, 03-Jan-2018 17:24:22 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=xmrWWayZROS0kmQXlsW6iYbn; expires=Sat, 05-Oct-2019 17:24:22 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug XoPTrzJkFgn6DPnOVUuNO4YH5g8/iM4thZZFuL0bnoxIUl+Eck/jtdCRZD1umt19N8THJqARIvdp+lYkZ5hvxQ==
X-Frame-Options DENY
X-Xss-Protection 0
axis.facebook.com

http://axis.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://axis.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:35:55 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug mY+CIQLizAkdeYOAKnDPFK8Hjq42gy/COjhJbvNSX9zFzLuj3mAks/VJ6rTvAj3/BePLFd75aiShJveVHCaQ9Q==
X-Frame-Options DENY
X-Xss-Protection 0
axis.facebook.com

https://axis.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:47:56 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=04Bj4jx2Kp9H0snxQ..BZ1mI8.RZ.AAA.0.0.BZ1mI8.AWXgzJGT; expires=Wed, 03-Jan-2018 16:47:56 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=PGLWWXcrp2L-dm4S-YkFFi-1; expires=Sat, 05-Oct-2019 16:47:56 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug Qsq6TKSWoVCLoT6Lv1zFW+ycOsahekffFoDXF7z0df1tM7wwQ4fCPXiD6xNdkrFqNBXFypErPMmk/P6XNtJ0VA==
X-Frame-Options DENY
X-Xss-Protection 0
ay-bo.facebook.com

https://ay-bo.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:16:51 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0K4rJbD4S0RzQqTLl..BZ1lry.W-.AAA.0.0.BZ1lry.AWWXv4IE; expires=Wed, 03-Jan-2018 16:16:50 GMT; Max-Age=7775999; path=/; domain=.facebook.com; secure; httponly sb=8lrWWcwTIHr0KnLFBSqxLI7z; expires=Sat, 05-Oct-2019 16:16:50 GMT; Max-Age=63071999; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug L7JHWqsAKsDCeKgBxCMUwmaISN98PoRwKv9OUhG/+fVN4/R9pDzY9dNY6nB/ex/nE6/AgcTw2voKHW+BPK62sA==
X-Frame-Options DENY
X-Xss-Protection 0
ay-bo.facebook.com

http://ay-bo.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:02:05 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0DBBFYiw3c7UzA4wv..BZ1mWN.c6.AAA.0.0.BZ1mWN.AWWRyEvR; expires=Wed, 03-Jan-2018 17:02:05 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=jWXWWaR8KTBodXvWk5VbD93m; expires=Sat, 05-Oct-2019 17:02:05 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug ShhuoZNxgSBwr7q5Tol+z7NZ/mBZumcVz9Y+1xRGPO4y4QQfV7JGC6wXT6iNnJLKYiQ3Oqe0AjvILjoOa/g45A==
X-Frame-Options DENY
X-Xss-Protection 0
az-az.facebook.com

http://az-az.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:34:29 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0F4OpLt1tPDS89M3O..BZ1l8V.ym.AAA.0.0.BZ1l8V.AWW6aUld; expires=Wed, 03-Jan-2018 16:34:29 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=FV_WWb_sVMXL8a6DKoP5Iylb; expires=Sat, 05-Oct-2019 16:34:29 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug QisKjyF4tassQAD8v5oym3s1l/Tfcs6ocmvoNT4qu9AkiMwUqYfazm6O9+ABC29a3uvcAW0zkngoEqXDTVKYmg==
X-Frame-Options DENY
X-Xss-Protection 0
az-az.facebook.com

https://az-az.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:27:05 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0k0wklqqJFdvPf4Ga..BZ1mtp.Ui.AAA.0.0.BZ1mtp.AWXtUSjx; expires=Wed, 03-Jan-2018 17:27:05 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=aWvWWdhp-9cBjttLD9bUdLZt; expires=Sat, 05-Oct-2019 17:27:05 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug nOQfyK6BSRzPsvqGqeFKeXvrKeWw0uEtqqRp+9Zt+Q5ngFuqlJZxTsmd3+OgWTxwnZPB/CHoSvqyYV+A9BVy5w==
X-Frame-Options DENY
X-Xss-Protection 0
az.facebook.com

https://az.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:28:30 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0PFfIsbLBMyWnXIzB..BZ1l2u.uL.AAA.0.0.BZ1l2u.AWXYG8MH; expires=Wed, 03-Jan-2018 16:28:30 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=rl3WWQOZE1HdxWAAXnwH53N5; expires=Sat, 05-Oct-2019 16:28:30 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug UAIjgS0cG6JHrRCHqnk0wJYev3ul/ISBciJnTH2i3B5npC9chZe9qoYtmXeT2aj2Xp1zF3zGyDO6/uqgWmLVZw==
X-Frame-Options DENY
X-Xss-Protection 0
az.facebook.com

http://az.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://az.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:31:19 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug Yatk8g9U0zz0ThswSKwgtwzpbPkdp48kpNZ2YbSdmS5316QukQ2IHeJyaIKWF2niXMpFc/mGtIw3QrWlwTLwxA==
X-Frame-Options DENY
X-Xss-Protection 0
b-api.facebook.com

http://b-api.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://developers.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:18:17 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug yMTtyX3dGblfl9MzGWGak9Gvonbikj9VbLnubnrXYVcUkTgm8SVKoWdq7v6ae6RV+UrUHPzTpeEOocRunC91yg==
X-Frame-Options DENY
X-Xss-Protection 0
b-api.facebook.com

https://b-api.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:34:49 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0kAf2DagkGe9WN4op..BZ1l8p.NB.AAA.0.0.BZ1l8p.AWU0BCNE; expires=Wed, 03-Jan-2018 16:34:49 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=KV_WWcLUwbcL-dx8VorlOvNv; expires=Sat, 05-Oct-2019 16:34:49 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug y6Pbh5+r4odHD6ja9Xyhu+OTA9Z76l91t7CKuC8ctSrt3xY3Ub0zq1EYDd9xsy40FQkGqeHfUpdRKuV7lTAJSA==
X-Frame-Options DENY
X-Xss-Protection 0
b-graph.facebook.com

https://b-graph.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:32:35 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0gcTN9iZXHSHFwz3G..BZ1l6i.4m.AAA.0.0.BZ1l6i.AWWZfZ5t; expires=Wed, 03-Jan-2018 16:32:34 GMT; Max-Age=7775999; path=/; domain=.facebook.com; secure; httponly sb=ol7WWeBQulDSADxLb5bgwZRU; expires=Sat, 05-Oct-2019 16:32:34 GMT; Max-Age=63071999; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 3RWye6YwdVS5YECOvoD2dNFuny913bb3Kyu8hON9wqr1IkR5oPDl0f5fFxn46TdER0T45d9Yfyz1vdLhWwrVrw==
X-Frame-Options DENY
X-Xss-Protection 0
b-graph.facebook.com

http://b-graph.facebook.com/ source code | headers | screenshot

400 Bad Request  
Access-Control-Allow-Origin *
Cache-Control no-store
Connection keep-alive
Content-Length 275
Content-Type application/json; charset=UTF-8
Date Thu, 05 Oct 2017 16:35:04 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Facebook-Api-Version v2.4
Pragma no-cache
Vary Accept-Encoding
Www-Authenticate OAuth "Facebook Platform" "invalid_request" "Unsupported get request. Please read the Graph API documentation at https://developers.facebook.com/docs/graph-api"
X-Fb-Debug FyXJQkHp7ts35/C5qKvqdqLdyiq3/sleH9sQR6WhW1MM47w86Zi8It2Pyw1YP0Bypo+YqpeigmOeuQVP42XhPA==
X-Fb-Rev 3349509
X-Fb-Trace-Id FCb08ivFn35
b-m.facebook.com

https://b-m.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:43:20 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=017xVkLtYNqnsHvZb..BZ1mEo.cV.AAA.0.0.BZ1mEo.AWXdQAQU; expires=Wed, 03-Jan-2018 16:43:20 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=KGHWWToQnyuMagXP8JxQnLG5; expires=Sat, 05-Oct-2019 16:43:20 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug LfqFMUnXqzgtA/FrAQ/TH2hhpjDbP0GaNu5gFb0fTLNgb6oJpgQo14O/EVLZT6yz3V1rGFQEFflTnk6AGGsW8A==
X-Frame-Options DENY
X-Xss-Protection 0
b-m.facebook.com

http://b-m.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://b-m.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=utf-8
Date Thu, 05 Oct 2017 16:45:27 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie datr=p2HWWcTQKEiZBPo2U2uZcPCk; expires=Sat, 05-Oct-2019 16:45:27 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly reg_fb_ref=https%3A%2F%2Fb-m.facebook.com%2F; path=/; domain=.facebook.com; secure; httponly reg_fb_gate=https%3A%2F%2Fb-m.facebook.com%2F; path=/; domain=.facebook.com; secure; httponly fr=0M2SmzbiZu4pAqFO2..BZ1mGn.4K.AAA.0.0.BZ1mGn.AWUh8ChA; expires=Wed, 03-Jan-2018 16:45:27 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=p2HWWY3JEuzW79zvjjqWFy-7; expires=Sat, 05-Oct-2019 16:45:27 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug LFoVfsutL1lEiXe4tdw3pu1Nb2Qi5WG+e7t8/e20G4MTKThifqZY6tlg4aGP66D9Xr4k09YlNcfbSmUHCLPfEg==
X-Frame-Options DENY
X-Xss-Protection 0
b-www.facebook.com

https://b-www.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:02:43 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0wdeWagAdQOXM5HvV..BZ1mWz.0H.AAA.0.0.BZ1mWz.AWUXN1xW; expires=Wed, 03-Jan-2018 17:02:43 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=s2XWWaZyq2aRwLxh-ox8ISV1; expires=Sat, 05-Oct-2019 17:02:43 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug MdUpmycSFxMv4QVonz2T0SpRH+wkmB2IcZl7GFceANZ+sfPXrgpnFzqmGTlSV8jTMdt7OMFCxnm3dCkSA1PQ8w==
X-Frame-Options DENY
X-Xss-Protection 0
b-www.facebook.com

http://b-www.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:09:10 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
P3p CP="Facebook has no P3P policy fb.me/p3p"
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0NLDcAyQRks9fZyli..BZ1mc2.aG.AAA.0.0.BZ1mc2.AWV2fAp_; expires=Wed, 03-Jan-2018 17:09:10 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=NmfWWQ41pzcND2CLvtLGq7ay; expires=Sat, 05-Oct-2019 17:09:10 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 11tMpf4ng2teEw+TOIFdp86EC6o6C1wvl3D94ITzeQQaLIBQRr12VYavoMsLrF3l9PXvXR20D9Xo2m/vNovOUg==
X-Frame-Options DENY
X-Xss-Protection 0
bacardi.facebook.com

https://bacardi.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:47:13 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0SZXmWPUw74Yr0SBo..BZ1mIR.Vz.AAA.0.0.BZ1mIR.AWWykEJr; expires=Wed, 03-Jan-2018 16:47:13 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=EWLWWZi61SHt14muypCF9I9O; expires=Sat, 05-Oct-2019 16:47:13 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug K8HRXS5X9Xg53rwnKxOUJ1UiU+cJCsoNbyzugxjToEU8mI4Wst0dbJpMBMqtaKdJM6uhaiBPj22czr/N3PpGAw==
X-Frame-Options DENY
X-Xss-Protection 0
bacardi.facebook.com

http://bacardi.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://bacardi.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:27:28 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug Yk4Vc7sU9uYsICghRp5Mq50S1j3TLgtXBpdduXCU1D2kXYQgJ7fjaSImpmudHTSiZkXPBvDTaCzrYZ5cdIekAQ==
X-Frame-Options DENY
X-Xss-Protection 0
badge.facebook.com

https://badge.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:16:13 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0nbeYeb8boExG0RT7..BZ1lrM.ie.AAA.0.0.BZ1lrM.AWUEYXnd; expires=Wed, 03-Jan-2018 16:16:12 GMT; Max-Age=7775999; path=/; domain=.facebook.com; secure; httponly sb=zFrWWXczfU8bnQNwhXDEYl_f; expires=Sat, 05-Oct-2019 16:16:12 GMT; Max-Age=63071999; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug QixsrAjLEYspIXM3atzDsHrayS9uu7iTEXQgZuGzW2tJuKFVRg3aoNyFBocWTWtQOVPEA1j0qZX3XuIUE5UBbQ==
X-Frame-Options DENY
X-Xss-Protection 0
badge.facebook.com

http://badge.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:49:28 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=07FBxVaE1qCEyW3gA..BZ1mKY.OH.AAA.0.0.BZ1mKY.AWWY6LRv; expires=Wed, 03-Jan-2018 16:49:28 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=mGLWWZ-sT3s-BZl6mRpfhJCy; expires=Sat, 05-Oct-2019 16:49:28 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 5ynXJ8jfnNrEFFVrf4bni1fgHkkdzJuAxDuzbGVe9/LhPXzGzg1qxtV8w24moBsFU0FamK5TvjYmRIi7nnCsYw==
X-Frame-Options DENY
X-Xss-Protection 0
badoo.facebook.com

http://badoo.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://badoo.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:22:47 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug DR2PngPA3kRV25KHM98iiWgSgoD7oruIKnXH0HeznnTU2Xt8qVWaPtxxEMtRdYnZXpRzcrWM5lQdgNherJCXmA==
X-Frame-Options DENY
X-Xss-Protection 0
badoo.facebook.com

https://badoo.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:51:33 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0WfTn8DTOW2Glt9U9..BZ1mMV.g9.AAA.0.0.BZ1mMV.AWX3Ha3t; expires=Wed, 03-Jan-2018 16:51:33 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=FWPWWdQEkZmOMFobZMn6GaME; expires=Sat, 05-Oct-2019 16:51:33 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug TWSbJaAxf8u0QL0YReqolmveycHz4b/fCrsJPoqh0LAc+3PGLDchIE4547kYY0pvMJphne5Uc2KdDCZ6V9Q9pg==
X-Frame-Options DENY
X-Xss-Protection 0
bairdwarner.facebook.com

http://bairdwarner.facebook.com/ source code | headers | screenshot

200 OK  
Content-Length 1573
Content-Type text/html;charset=utf-8
Date Thu, 05 Oct 2017 16:19:09 GMT
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Fb-Debug EHcmNuhXmYiQz8y1imo4cdgpWV64BBQrs8ZZhH04n6eSqnagRoQjXFHVElAaSdMQwEIKwLdSX3t/rX1jyhLfKg==
bairdwarner.facebook.com

https://bairdwarner.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:01:51 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0n1DarcCin5OVU51m..BZ1mV_.Sb.AAA.0.0.BZ1mV_.AWWwOVGy; expires=Wed, 03-Jan-2018 17:01:51 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=f2XWWRQeZw24dc1V6yTfyTgS; expires=Sat, 05-Oct-2019 17:01:51 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug kskjZuq2jYXZHw6EjEGDBaNed32quj1tRDBl/aYPusUsRDeL5MvWeO/NRMwgTsediIh+aWI0ETBmF1SBXTLubA==
X-Frame-Options DENY
X-Xss-Protection 0
baked.facebook.com

https://baked.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:56:19 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0XV2C6tiLbrwstDHN..BZ1mQz.U4.AAA.0.0.BZ1mQz.AWWw47Cm; expires=Wed, 03-Jan-2018 16:56:19 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=M2TWWYkCKzRMhkbthie3VIny; expires=Sat, 05-Oct-2019 16:56:19 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 5IBtZWHvtPENPT9E7ghMTekndRVfv+llVlHvImBO6xcWHfFOl65i0AgiXhtn3jImLMz3a2hG/sNhqZeoKvy2mw==
X-Frame-Options DENY
X-Xss-Protection 0
baked.facebook.com

http://baked.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://baked.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:08:07 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug xIXaxHsHF0+VfEShvyxE+hA8ybpDx2dxus980V4kJMbcUpmZmYq50bt1+zLcVYoSdfAfBiMI3cPf1cT2YYkD+g==
X-Frame-Options DENY
X-Xss-Protection 0
bakerandmckenzie.facebook.com

http://bakerandmckenzie.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://bakerandmckenzie.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:20:45 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug HCGb67iwEgK9YF08oXMrV9jF8KeihsMTRVPqW+OLQl4MXAM1ryuwOH1DW98XRGzkudbXoCUOip0p1tAcFAAFwQ==
X-Frame-Options DENY
X-Xss-Protection 0
bakerandmckenzie.facebook.com

https://bakerandmckenzie.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:34:01 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0TMEHPwNeDa6AhbBQ..BZ1l75.aO.AAA.0.0.BZ1l75.AWXlny3E; expires=Wed, 03-Jan-2018 16:34:01 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=-V7WWVznM0LFxP2zSgVooNCb; expires=Sat, 05-Oct-2019 16:34:01 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug Zo5KhgZA1MX2Un0WOTVRli9MkTBfhHxLaEiqaugfJ3Irw6WH4KiScpn09hcgwUGGRgk4InYTPrh/UUyT/gz8yQ==
X-Frame-Options DENY
X-Xss-Protection 0
ball.facebook.com

http://ball.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://ball.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:24:22 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug aMALgGjEKdD2fklwsSCX5A2e6sEJQOFGACIWmT+9T+7K2In3YY6npYKUICMM302AwGhLofrZNT9AqMrz/pHj0A==
X-Frame-Options DENY
X-Xss-Protection 0
ball.facebook.com

https://ball.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:07:27 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=02t323U3OKKLC2yLV..BZ1mbP.49.AAA.0.0.BZ1mbP.AWV5dfoQ; expires=Wed, 03-Jan-2018 17:07:27 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=z2bWWUqWB_EjmUIALdGo5I-m; expires=Sat, 05-Oct-2019 17:07:27 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug tUfszsFqw+1u+B+VKA+Bmn0+D4gbeX59RLswJseNcPhFkZ4QEGa0yKS37wiysx9y4fLg9QemSAVby+P08ATggg==
X-Frame-Options DENY
X-Xss-Protection 0
banana.facebook.com

https://banana.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:34:37 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0lSNtRYaWmyLVm572..BZ1l8d.GP.AAA.0.0.BZ1l8d.AWXeqsH2; expires=Wed, 03-Jan-2018 16:34:37 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=HV_WWVg6faXnd57HfxY-eOex; expires=Sat, 05-Oct-2019 16:34:37 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug vbdAKftT//9qffWPju9+LrV6tgmxWtuuk9UdVrSeru9HQaZR4FMY2Lgy/8aow6VXHfj8SHEf1/gaAUFxKTc+3Q==
X-Frame-Options DENY
X-Xss-Protection 0
banana.facebook.com

http://banana.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://banana.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:58:49 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug IHxgDGNY6ev4TMw7lD9hqmCSwqBiPSMOShNfu1GfCjPxw6UOvWDE8WjeCGWqn+cAfxEnMNsYYHMGopLoEBX6og==
X-Frame-Options DENY
X-Xss-Protection 0
bandwidth.facebook.com

https://bandwidth.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:23:41 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0GPV8imsT8DdcBpvp..BZ1lyN.H9.AAA.0.0.BZ1lyN.AWXDzOqq; expires=Wed, 03-Jan-2018 16:23:41 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=jVzWWcRAMBWmgkUfhQY9I_2T; expires=Sat, 05-Oct-2019 16:23:41 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug VSNqRjlh63dAOw6dBk1eNVoURVr+9nqHYaPqR6Si41uwMcnw+QB0NY9cTvF7x7c5VSNjllg68OBdQ/akAw+TYA==
X-Frame-Options DENY
X-Xss-Protection 0
bandwidth.facebook.com

http://bandwidth.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://bandwidth.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:26:49 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug InaQkLaCqqYciLvii54ERo0FUBdytKNArmfgm/hFxVGwxDcPgKI4ZOweckc56fhb+Xr/rQlRXWWkAi3Gy7KHHw==
X-Frame-Options DENY
X-Xss-Protection 0
bankalfalah.facebook.com

https://bankalfalah.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:22:30 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0dljvjv13n8HfJsMv..BZ1lxG.W4.AAA.0.0.BZ1lxG.AWVouhKW; expires=Wed, 03-Jan-2018 16:22:30 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=RlzWWUdzeFj3IaCD_HpKaiB5; expires=Sat, 05-Oct-2019 16:22:30 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug YlDfs1Cc2wWTFx323ZIa0JhHCMlkHyt8qgoQ6/dISfdS3xSHPpZ/nsi+UAttKaKh2+1DMYYLzAavXAJlG3xrfQ==
X-Frame-Options DENY
X-Xss-Protection 0
bankalfalah.facebook.com

http://bankalfalah.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://bankalfalah.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:39:59 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug jc3TOHCITc9TQY7muSuVuo+w0HTBTrsWGzS/wznB+avF84rtgboXNE4vGQSMLwqTtK0OrS/zmP3cg1wibYnIsg==
X-Frame-Options DENY
X-Xss-Protection 0
bankmuscat.facebook.com

http://bankmuscat.facebook.com/ source code | headers | screenshot

200 OK  
Content-Length 1570
Content-Type text/html;charset=utf-8
Date Thu, 05 Oct 2017 17:16:47 GMT
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Fb-Debug F+sKO/08Vz5m8uD0EUdQLAcXk8tZQeLOH9wtMro+psfFueHjXAuuszUUT5MsvFgRd5QQ9CLOA0Rzo80/5WXpxA==
bankmuscat.facebook.com

https://bankmuscat.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:22:23 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0Ey8MnpJC5fyzTDnh..BZ1mpP.E3.AAA.0.0.BZ1mpP.AWX95vbl; expires=Wed, 03-Jan-2018 17:22:23 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=T2rWWak4x_ZqBwV0xdRaqjBX; expires=Sat, 05-Oct-2019 17:22:23 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 2rxlQu/RfYDXot2YE6st1oo5YaSPXwOsSHlv+HUHYhSz7sUEEl9X/+nf/ze1yywpIgHG3MB1mHt4acxbriqqZw==
X-Frame-Options DENY
X-Xss-Protection 0
bankofamerica.facebook.com

https://bankofamerica.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:39:51 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=05oCsGpS3Hgjkt2Uz..BZ1mBX.5Q.AAA.0.0.BZ1mBX.AWU33kOO; expires=Wed, 03-Jan-2018 16:39:51 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=V2DWWUfofcnC9QeceKdjdxSv; expires=Sat, 05-Oct-2019 16:39:51 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug Y1WUE3dZ2qpXhYJNfiq0mzG/csBc9MJwetJJhjRcuzKXN68AFznqoRDHrlEAuTT0+pYWJ1mXG1e1nJqI6djOVg==
X-Frame-Options DENY
X-Xss-Protection 0
bankofamerica.facebook.com

http://bankofamerica.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://bankofamerica.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:47:25 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug TUtZ5Inpg+0fW+SLgPFfv1v+qwjtI/Yk3GkQTZLKyG8/rri1a+5t/tqwef8DXGfD8kMYHuP9ZSvxIan0KFBdWQ==
X-Frame-Options DENY
X-Xss-Protection 0
baobab.facebook.com

https://baobab.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:31:27 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
P3p CP="Facebook has no P3P policy fb.me/p3p"
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0TJzRk7DSGUVXfoE4..BZ1l5f.NO.AAA.0.0.BZ1l5f.AWW71-wa; expires=Wed, 03-Jan-2018 16:31:27 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=X17WWaQHsQEOtApeDy6gY5Aw; expires=Sat, 05-Oct-2019 16:31:27 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug D3/MGhX+jYIwaw2r1thdF/j5RZVW2sYd3xWmqVhL8uwM3ZcFjEXysPXGuvm/aGDr0RdLC6NRp41i2yJ8yR0t2A==
X-Frame-Options DENY
X-Xss-Protection 0
baobab.facebook.com

http://baobab.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://baobab.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:59:16 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug giGbgOiNncARrPlYb14dIKEy8XbZfNGY477iJro+w0pUD30MKgQvOPDBwhpNYA+QhmjjFNnGGvjeNm2WuHaYhw==
X-Frame-Options DENY
X-Xss-Protection 0
barclays.facebook.com

https://barclays.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:32:42 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0n4UJTR1BdnQFTWHO..BZ1l6q.pe.AAA.0.0.BZ1l6q.AWWFmbjW; expires=Wed, 03-Jan-2018 16:32:42 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=ql7WWYV4RUAvj5TYG969833J; expires=Sat, 05-Oct-2019 16:32:42 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 06c4FMwTNTmBK+pOkY0xeXD5fZLIG8xqmXddP2OCwfSmh66efYrclyEtM30EntGI3FX8/MnTk69E+nxXriEKiw==
X-Frame-Options DENY
X-Xss-Protection 0
barclays.facebook.com

http://barclays.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://work.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:44:25 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug pomBzIMDFnQbehijDxLyfMjNz2dHEn5+e/sNfUGnMiDs5CLa9gs+TLOCu5rPxGyTTS5L3iAQdsFHWbP5HbRA0Q==
X-Frame-Options DENY
X-Xss-Protection 0
barney.facebook.com

http://barney.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://barney.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:16:34 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug wBu9DjMmWT4Bbw5a+Fa2X73X1gAv+7Rnr0I/o5L27x/mgA6Djtnb1ACCRUriluPx3CtQUEGgaiXiFjFa/eJZRA==
X-Frame-Options DENY
X-Xss-Protection 0
barney.facebook.com

https://barney.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:42:06 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0Mp4BtZWkkUZqKE92..BZ1mDe.bx.AAA.0.0.BZ1mDe.AWUXPt54; expires=Wed, 03-Jan-2018 16:42:06 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=3mDWWbSmEHRJaCtGICUibyRx; expires=Sat, 05-Oct-2019 16:42:06 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug Oukhq+eo7F2nUeoXe8wmE8A8Q0q/na7QnH9gGG2jZ+IjqTJb3xP8m+oP4RG0AJQdGBAWPD2bWPrzIvJGnSmclQ==
X-Frame-Options DENY
X-Xss-Protection 0
bartek.facebook.com

https://bartek.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:19:27 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=09yhB3Ac46bGRSgXP..BZ1luP.Cz.AAA.0.0.BZ1luP.AWVwdZbE; expires=Wed, 03-Jan-2018 16:19:27 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=j1vWWSWIm723QFP0sYM0meps; expires=Sat, 05-Oct-2019 16:19:27 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 8rxXtbIce2SSWijz0iHE1NGXpIWF9pQqztGxw6b4p9tGHt/qkosRsjfOhzf/E4zHlDeM/EVX6lyPCt2aZHaklw==
X-Frame-Options DENY
X-Xss-Protection 0
bartek.facebook.com

http://bartek.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://bartek.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:19:59 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 4miGwVkNeISDAr+LMx4qjfqMPuLHkdOziy4w+N6wbR66PF7zM6DVlBkU/HJZS75fDvc6I79ZMRFx+xhUNEfCfA==
X-Frame-Options DENY
X-Xss-Protection 0
basico.facebook.com

http://basico.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://basico.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:29:58 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug kHedJsk3Tf9gccfXfrGvlYXaV4uVNbVGelBhYB3HjlqkKJYZitB9BAstR3aaXuDWAOmODB3sMjjhTIBDrhGMNw==
X-Frame-Options DENY
X-Xss-Protection 0
basico.facebook.com

https://basico.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:55:18 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0r2RAV22QXpsuHTW4..BZ1mP2.MN.AAA.0.0.BZ1mP2.AWUn9o-Z; expires=Wed, 03-Jan-2018 16:55:18 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=9mPWWThTtJn-9H99KezTrH0q; expires=Sat, 05-Oct-2019 16:55:18 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug sojG0d4zQVGPgBTxahHnbuqAxhOypHhG8GNEsaY9DdSza3bpMwyZtEsFiAau5PxFOVFiFmifLSP/40wxX0HXPQ==
X-Frame-Options DENY
X-Xss-Protection 0
bbc.facebook.com

http://bbc.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://bbc.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:26:55 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug +lFgFigYZ1oycUQPiKWwvNOlICcv1oZYABIUJvYIMzWHV97w4dKPZKZt1INeLwtaPyCLCKXZFD9VET2TE1dKxQ==
X-Frame-Options DENY
X-Xss-Protection 0
bbc.facebook.com

https://bbc.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:11:26 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
P3p CP="Facebook has no P3P policy fb.me/p3p"
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=07CTFmmHQ6l6FSPjO..BZ1me-.3G.AAA.0.0.BZ1me-.AWWLxUB6; expires=Wed, 03-Jan-2018 17:11:26 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=vmfWWT3VZ6H3eQYPYmrOamBn; expires=Sat, 05-Oct-2019 17:11:26 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug qf/neZE/2iLTp6gqdprYPvFPDpGnTucTsCOsyT1/kPHVmso76OSvojAPBND8xGiBEc3QV7bJk0HTZYHAtqkyQw==
X-Frame-Options DENY
X-Xss-Protection 0
bbva.facebook.com

https://bbva.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:23:29 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=06Oqd8L6VsrxrIf0D..BZ1lyB.It.AAA.0.0.BZ1lyB.AWV70KCw; expires=Wed, 03-Jan-2018 16:23:29 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=gVzWWepUc-xqVGxRyfVwA30W; expires=Sat, 05-Oct-2019 16:23:29 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug Sxppw0aaHgckNw56xmSXI2o5zouXbB7daaA9ToIvR3Ut/EK7G0mPrSvXXq90wuTtxyQjhX+IvBIGYYbuFUStww==
X-Frame-Options DENY
X-Xss-Protection 0
bbva.facebook.com

http://bbva.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://bbva.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:36:00 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug aQrNQwXQzQCpn3RxHqp2gE1PBE2qWAeSIpyAl0w4NwhhmZ777jEB2qt+iizb+S1FXtdvaDava8qg45lMzPYU1w==
X-Frame-Options DENY
X-Xss-Protection 0
bc.facebook.com

http://bc.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://bc.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:40:55 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug fld8zz90HGvbv1BtKTwJfFnaMNftTXFpdcADAMK0ELKmpMkkLAzGX99VvvyqMpAukx3KObg+9iP6Tx9DrcBftg==
X-Frame-Options DENY
X-Xss-Protection 0
bc.facebook.com

https://bc.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:27:43 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0SOpp51F8ojtKLgQq..BZ1muO.mP.AAA.0.0.BZ1muO.AWXSd-y0; expires=Wed, 03-Jan-2018 17:27:42 GMT; Max-Age=7775999; path=/; domain=.facebook.com; secure; httponly sb=jmvWWQwCbayj13Sq9ioNPiHJ; expires=Sat, 05-Oct-2019 17:27:42 GMT; Max-Age=63071999; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug NvchuZgDwYYV4mH4YOI79KkC0Fgxd0SCoTiY8V6/rIKpHbQxUa2heU3NlNSaHdfB2dWpx4geyoiDCchRdT9+XQ==
X-Frame-Options DENY
X-Xss-Protection 0
bca.facebook.com

https://bca.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:23:20 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug l/2YYIa4S2N2BBpA2vgrUAQda6ZxOAMvV4bpCwuhERIqxNGK7zzmMvV3upXsoN+je9FXbr3cGUSVKjvHx296kA==
X-Frame-Options DENY
X-Xss-Protection 0
bca.facebook.com

http://bca.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://bca.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:03:05 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 3FB/4TpYz8iQTA40J1DFgcYN040rT/CQkdWO/+jAQ9YI5aJYuy5tloBHl3td8dM3k10r1FyhWm1f9ChJQCW0/Q==
X-Frame-Options DENY
X-Xss-Protection 0
bccancer.facebook.com

http://bccancer.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://bccancer.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:13:32 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug IXAa+Vm7Xm5hWt9Qgf5kQg7FbX5ETxdpXnTKCnvZegtL0qIt22lhz6eUQsjrKslgbsi2DDzrsNmdouY5C0vryA==
X-Frame-Options DENY
X-Xss-Protection 0
bccancer.facebook.com

https://bccancer.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:21:15 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0EpMRJ6Dw9hxdVnVc..BZ1moL.xw.AAA.0.0.BZ1moL.AWUnnq5m; expires=Wed, 03-Jan-2018 17:21:15 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=C2rWWbXt6_vkU8gIDg_L7RmJ; expires=Sat, 05-Oct-2019 17:21:15 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug z39CzwLNcXKCccqZ7DxBlfThqSbmsp+uaeDrIV+vDSGsWiZCZL7/GpNnihdoJx5uRQfZrGU1BH75esuT4G9d9A==
X-Frame-Options DENY
X-Xss-Protection 0
bd.facebook.com

https://bd.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:43:23 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0bjk5LvB9wUB7RuKA..BZ1mEr.xN.AAA.0.0.BZ1mEr.AWVsrAfK; expires=Wed, 03-Jan-2018 16:43:23 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=K2HWWVKCkSRUzVT4xDRboDPD; expires=Sat, 05-Oct-2019 16:43:23 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug +hBHI/FEC5WrfeIpvj4uqzjFhKc5ZhhMUc5+0o/leAYDjzzUCPO4YmoOfZyyoc63hAQ9D6K6rYbXzCdKSldcQQ==
X-Frame-Options DENY
X-Xss-Protection 0
bd.facebook.com

http://bd.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://bd.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:15:24 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug heFcqVY/hVpOUGMb+o6BDkH6fKjTAZAL9vYqE8Y8lDVRRRzoF9OyM7OsvaUw8ZqgUAilR6rKzyvaEABIUAhajg==
X-Frame-Options DENY
X-Xss-Protection 0
bdodk.facebook.com

https://bdodk.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:23:38 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0QY6BQfRMVdneyyj3..BZ1lyK._a.AAA.0.0.BZ1lyK.AWUxbDtW; expires=Wed, 03-Jan-2018 16:23:38 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=ilzWWZELPF3ZGTtSR_5y5YqM; expires=Sat, 05-Oct-2019 16:23:38 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug K+TX+ckKz9KstaWUO1QGrFOzArCg8L8muwBUrvxJBEOubdS+xkUT+miEwA0e4MXJfcYUr4pkXn+kx6cSxe0QMA==
X-Frame-Options DENY
X-Xss-Protection 0
bdodk.facebook.com

http://bdodk.facebook.com/ source code | headers | screenshot

200 OK  
Content-Length 1560
Content-Type text/html;charset=utf-8
Date Thu, 05 Oct 2017 17:01:07 GMT
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Fb-Debug b/8P3wEdAMDzqxKyp90E6w+j0V6XtHWIukvdpCArUjKw4FiYLwcbH5dM7HmzMqemR8OcU5/YahfwYNNKA4kEXQ==
be-by.facebook.com

https://be-by.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:14:42 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0vg7kRgIGISVtqlCj..BZ1lpy.yA.AAA.0.0.BZ1lpy.AWWfI1Sp; expires=Wed, 03-Jan-2018 16:14:42 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=clrWWcEuQH1p4nxaBlMDPwDJ; expires=Sat, 05-Oct-2019 16:14:42 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug ThGfMGPW2wUEuQMCPJozoFqC35mOHgdJos+DWcillZE4Rpubj5U9Oi6VAICAW8aJ2eL8zNTUtngPqvCCkBWgIw==
X-Frame-Options DENY
X-Xss-Protection 0
be-by.facebook.com

http://be-by.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:31:54 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0kJzhEAfJRmhdjZqL..BZ1l56.2L.AAA.0.0.BZ1l56.AWWGqf1n; expires=Wed, 03-Jan-2018 16:31:54 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=el7WWbJP6EXy8QD-r1QC8aBf; expires=Sat, 05-Oct-2019 16:31:54 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug qaV2JghiC+bWiMc1FMMBTAt97/yMEj7ZoH//JsECgjQgPs3Lzo0Q/jQFHrikV9K2U4+1XroF4ZR6B6WtTnEHDQ==
X-Frame-Options DENY
X-Xss-Protection 0
belgroup.facebook.com

http://belgroup.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://belgroup.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:23:58 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug P1G6PJXKpk39boBgqz4bGhh0GyMNTJ+Fa1w5pYD6WkOfaZSvZ3AdUfJkzRAw6ZGpzVKa3uAhafAeFmdGslyAow==
X-Frame-Options DENY
X-Xss-Protection 0
belgroup.facebook.com

https://belgroup.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:44:16 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0wjEJHNpN9P0KZ9cN..BZ1mFf.Xx.AAA.0.0.BZ1mFf.AWWKYkyt; expires=Wed, 03-Jan-2018 16:44:15 GMT; Max-Age=7775999; path=/; domain=.facebook.com; secure; httponly sb=X2HWWSX4OIF4KCsFDQkfq4TH; expires=Sat, 05-Oct-2019 16:44:15 GMT; Max-Age=63071999; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug WtjzfsNrH/mh6VRsuz4MYtJDAxo90ynXJdeXUUBhlLvbEHmB/KPTMLFTY3jPwNMxnDsxqRsIrzf7Wy3647b9dQ==
X-Frame-Options DENY
X-Xss-Protection 0
believe.facebook.com

http://believe.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://believe.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:27:53 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug KVaajUszSCM+rCxNbXK/Nv55m4khRAOKefB3eG33n7/fS0kjcQw0jniY4KOOPWNRh0qbzbuyGdIzb2Whh9sp8w==
X-Frame-Options DENY
X-Xss-Protection 0
believe.facebook.com

https://believe.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:52:06 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0oWGIbm7r0mTBnpuW..BZ1mM1.C7.AAA.0.0.BZ1mM1.AWUduvON; expires=Wed, 03-Jan-2018 16:52:05 GMT; Max-Age=7775999; path=/; domain=.facebook.com; secure; httponly sb=NWPWWfaTTu_X_EYMgWyi4XXF; expires=Sat, 05-Oct-2019 16:52:05 GMT; Max-Age=63071999; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug VznK9VjLWa18HnpqNDask2q/nTbMKYKUmrkLAgjCKKjPMAO6P7rkhbsGMKQ7N63a4Eo1BfscsapP4+0Ye1etsg==
X-Frame-Options DENY
X-Xss-Protection 0
bench.facebook.com

https://bench.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:24:08 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0iZ7LJYk1Ve1BTDTg..BZ1mq4.9N.AAA.0.0.BZ1mq4.AWX_EmMG; expires=Wed, 03-Jan-2018 17:24:08 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=uGrWWXoOZKMTICj0My_Kqqq4; expires=Sat, 05-Oct-2019 17:24:08 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug rv9Hoz+7O/2mgDhkqGqjcE/+vRxGc3/jv+vTEDRCiWw0L5G8oT82nfSw7B+q1i7a/LZAzQpoZ9vJZHrEi2uG/w==
X-Frame-Options DENY
X-Xss-Protection 0