Report for facebook.com Generated 2017-10-05T17:28:56Z

z-p4-graph.facebook.com

https://z-p4-graph.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:20:28 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug k0+sIexO7UvTTyoXGjNz8HVpIAnV7o/bu9Ne6fcUlngyFeg4IqNevdmTGOIpkDA+mj5qBnI5nTR7B0SZyI1LEg==
X-Frame-Options DENY
X-Xss-Protection 0
z-p4-graph.facebook.com

http://z-p4-graph.facebook.com/ source code | headers | screenshot

400 Bad Request  
Access-Control-Allow-Origin *
Cache-Control no-store
Connection keep-alive
Content-Length 275
Content-Type application/json; charset=UTF-8
Date Thu, 05 Oct 2017 16:54:49 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Facebook-Api-Version v2.4
Pragma no-cache
Vary Accept-Encoding
Www-Authenticate OAuth "Facebook Platform" "invalid_request" "Unsupported get request. Please read the Graph API documentation at https://developers.facebook.com/docs/graph-api"
X-Fb-Debug m9di6Kw9tOBj22PdmGCthztQPYPFqkDpkHhpNSt2GPRR5OrPhIr3t13i04m+JkpwrTqWl9QUXIKz687vbYjIig==
X-Fb-Rev 3349509
X-Fb-Trace-Id HHpCwC/ELOA
z-p4-rupload.facebook.com

https://z-p4-rupload.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:27:17 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0sxdjiJtrq1GO5JED..BZ1l1l.Om.AAA.0.0.BZ1l1l.AWUmqw3x; expires=Wed, 03-Jan-2018 16:27:17 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=ZV3WWaRghOCt4YjElcxCONhy; expires=Sat, 05-Oct-2019 16:27:17 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug f+gX8Hjz9ifuHxIPYdt64wHlKuL0LxaZvRRigfivvzz11UtYb4/Sg4QCOVnl0LB6e0VXSC/3hWaAsW0wLclcEA==
X-Frame-Options DENY
X-Xss-Protection 0
z-p4-rupload.facebook.com

http://z-p4-rupload.facebook.com/ source code | headers | screenshot

400 Bad Request  
Connection keep-alive
Content-Length 118
Date Thu, 05 Oct 2017 17:08:59 GMT
z-p4.facebook.com

http://z-p4.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:12:36 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0MhJTn4PUyvaFRHnk..BZ1mgE.GF.AAA.0.0.BZ1mgE.AWWs0Fjr; expires=Wed, 03-Jan-2018 17:12:36 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=BGjWWduOQ8gwO-PQ27ZYgQ9f; expires=Sat, 05-Oct-2019 17:12:36 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug BVwUOdEvV4BrpNF840vCQmB4byJpVy7dmVty8Elui+PlR/huuYg+rZTQ2VaxBsnaKCSk7x1Qx7/PLZ1IV37TVQ==
X-Frame-Options DENY
X-Xss-Protection 0
z-p4.facebook.com

https://z-p4.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:18:32 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=03AywOEUkGZM9LsmQ..BZ1mlo.ng.AAA.0.0.BZ1mlo.AWVEXNtA; expires=Wed, 03-Jan-2018 17:18:32 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=aGnWWaC6Eb10YrG4_pLs5g8p; expires=Sat, 05-Oct-2019 17:18:32 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug Be/0lwpJfRepQi5giIERcH6JbXmISBT1LzHP5b5oXx5DkGVka/kJu9zdhl9zKAzzrnppDbq+q6Z7Ppo/3eWOeQ==
X-Frame-Options DENY
X-Xss-Protection 0
z-upload.facebook.com

http://z-upload.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:22:24 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug d0eX2WvGl42A9uhF+mHRXGSpOUBsBAraWSbsoT+/8QG3ghya2wLC15YWE20BKUZc/HTa0EWWwQIi8vB351/iRg==
X-Frame-Options DENY
X-Xss-Protection 0
z-upload.facebook.com

https://z-upload.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:57:20 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=08jP1ZXiAsZ8r577R..BZ1mRw.8r.AAA.0.0.BZ1mRw.AWW8nTCo; expires=Wed, 03-Jan-2018 16:57:20 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=cGTWWfesU4XsibDw404iyO0Q; expires=Sat, 05-Oct-2019 16:57:20 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug xRiLAb1mz5ZHWSri2ngiwVXo0eH9w3/tJBIyJLEa0b/2S8cwry0q6Wbvm1g8dpe9rPoYPDlh2IOi1IQhjuzTXQ==
X-Frame-Options DENY
X-Xss-Protection 0
z.c10r.facebook.com

https://z.c10r.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:28:18 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0wRYFfOjFox0MAhh8..BZ1muy.fO.AAA.0.0.BZ1muy.AWVo8oO3; expires=Wed, 03-Jan-2018 17:28:18 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=smvWWZddStNiC86l_rLym9nO; expires=Sat, 05-Oct-2019 17:28:18 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug Y2bat3V4Z9npLILxVfSnMww9JYLJuBjQggFWT08LFpFqYtDRoIZa6beTNaveF1H09/vCItAlypRX5EFhld7QiQ==
X-Frame-Options DENY
X-Xss-Protection 0
z.facebook.com

http://z.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:17:49 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0Q4eIDxQwcB4iQ95Y..BZ1lst.xk.AAA.0.0.BZ1lst.AWVyN6ZJ; expires=Wed, 03-Jan-2018 16:17:49 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=LVvWWeRxjSNFCZJ7PZBGN7_e; expires=Sat, 05-Oct-2019 16:17:49 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug yrY7yypjMV021EWhY4pgGxnV6Wl2WhEe3OM0mxoSFAVsiHMQfz1HxwQIvr+cyHNyOMnvnFDAoryMIgIc4aXvSw==
X-Frame-Options DENY
X-Xss-Protection 0
z.facebook.com

https://z.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:57:08 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug vzVnbC6wPLllnpWXlzA9sYyEQ+FCbE8+mhjMUIgibNBnPX/cSsEUvqgd0+vYk9I6qUo3v2p0MvqltgHprjwgNQ==
X-Frame-Options DENY
X-Xss-Protection 0
zag.facebook.com

https://zag.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:37:06 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug QrtL5zfP267+TMZJjstnNtaHhCdSoUeV9wobA7ptrGJ2/wRvJujkZBdD+rYqw0rB7znUT1UK6FC+p+ZKUNppww==
X-Frame-Options DENY
X-Xss-Protection 0
zag.facebook.com

http://zag.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://zag.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:24:18 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug P+e4chw/Ppt3bEzhTmVXxOXw8Qz3RGsAQdOdLrZeLUfSYA9m3TqZibBXv76oz14aqUu8WmxdQQG2dpxJlTJFMw==
X-Frame-Options DENY
X-Xss-Protection 0
zebra.facebook.com

https://zebra.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:56:17 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0mgtXT7zasjfdmY8l..BZ1mQx.6D.AAA.0.0.BZ1mQx.AWXM9GbQ; expires=Wed, 03-Jan-2018 16:56:17 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=MWTWWX0iln8MNkIKUMAc86jX; expires=Sat, 05-Oct-2019 16:56:17 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 4SKCdxEGcGAPO3yPCCabS9kc/xlrdwicbovwNQm0tDJoWi2Yzu6XBr84FsmDf5seGpjVTG5jVp8z8Q8bH7RYMA==
X-Frame-Options DENY
X-Xss-Protection 0
zebra.facebook.com

http://zebra.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://zebra.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:56:50 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug nOBzGCOsygqhSlRVu/gm13H5s6wX8NT7XiXYbMNQ/Jx73oEfCVpUU5kD5NCuyoHU6+paWV9sA9Z5cMjts1RgmA==
X-Frame-Options DENY
X-Xss-Protection 0
zenika.facebook.com

https://zenika.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:28:36 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=02Kr4kqv5zO3vx8ad..BZ1l20.k1.AAA.0.0.BZ1l20.AWVQF20f; expires=Wed, 03-Jan-2018 16:28:36 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=tF3WWfSQhiwd7ERyPNT_1n1j; expires=Sat, 05-Oct-2019 16:28:36 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug P+m5KdoJuOmL4y0Ts/3seNF5oQarzvemzZsY9bVaLmixiN1NW9U+XhZCLH5Etxj5Yu9h43FT4hXOOBNsMbrvbQ==
X-Frame-Options DENY
X-Xss-Protection 0
zenika.facebook.com

http://zenika.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://zenika.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:48:44 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug QWlV/yCulqg6WhtqqhiRfwW0gyR7h62zctpo3eW+4tzl2vS9hRmT1npDEAsWEQMbnT4x0v8vY63XNqne9X66qQ==
X-Frame-Options DENY
X-Xss-Protection 0
zero.facebook.com

http://zero.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://m.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=utf-8
Date Thu, 05 Oct 2017 16:28:39 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0OpEDdiaPIWqAntpv..BZ1l22.R2.AAA.0.0.BZ1l23.AWVOljbu; expires=Wed, 03-Jan-2018 16:28:39 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly reg_fb_ref=https%3A%2F%2Fm.facebook.com%2F%3Fzero_e%3D6%26zero_et%3D1507220978%26refsrc%3Dhttps%253A%252F%252F0.facebook.com%252F; path=/; domain=.facebook.com; secure; httponly sb=t13WWfwQyo_zeFW7AOC5KcX-; expires=Sat, 05-Oct-2019 16:28:39 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 4ROPRU0WtkA59mzuqXP12OI5kORllIJS0DJy8+hlGYCXhIOJPVoVCZqRqH64tACxrE2GDNbj+KCwSLH59fntEg==
X-Frame-Options DENY
X-Xss-Protection 0
zero.facebook.com

https://zero.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:30:20 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0ENKCVcjeZoTSYV7B..BZ1l4c.Dr.AAA.0.0.BZ1l4c.AWUz_fq2; expires=Wed, 03-Jan-2018 16:30:20 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=HF7WWaGUTPdtKrlcYUyCrC-T; expires=Sat, 05-Oct-2019 16:30:20 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug k741SzS42SiSbW/e3uSfQsU1u4CyxJ5odWuHZDNSEhQPJvD8ZE6UwLs4hk+jC10fL9jK4NWqvP44iz426SW0Vg==
X-Frame-Options DENY
X-Xss-Protection 0
zeroelement.facebook.com

http://zeroelement.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://zeroelement.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:24:54 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 4msxRLtYLe9ElwDg6svGrAB+Zb2l7SsqbovsUKmP8hfy9DYcU1h4ufnkpmOcWysbUrjsb8wvblIdbnp5GvU9Eg==
X-Frame-Options DENY
X-Xss-Protection 0
zeroelement.facebook.com

https://zeroelement.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:25:17 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=02l4h11bpT4LGYiSQ..BZ1mr9.5W.AAA.0.0.BZ1mr9.AWW119x0; expires=Wed, 03-Jan-2018 17:25:17 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=_WrWWcUngB0DJcJuYHORF_7s; expires=Sat, 05-Oct-2019 17:25:17 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 0yNX9w+vy2aqwI+pWIBE97QAyr63DPlq6TVLQ7gAUUZmDgBqLvwKP6yrd+Teci2VsmdUrz9vlQBY/YjsRyPgTw==
X-Frame-Options DENY
X-Xss-Protection 0
zeta.facebook.com

http://zeta.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://zeta.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:01:15 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug fYKREQTqbsns5G/Z1QYT0aYwp03KLyD4USbOjqxK+bQwy0V+O4pSLu488HCQk6cKINMZlQWIPUNAyb6o2uCwCw==
X-Frame-Options DENY
X-Xss-Protection 0
zeta.facebook.com

https://zeta.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:11:23 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0sJcGahhbAXwe12iD..BZ1me7.gA.AAA.0.0.BZ1me7.AWV89Hdq; expires=Wed, 03-Jan-2018 17:11:23 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=u2fWWVnXmDQrJ8UPIK1CmSlc; expires=Sat, 05-Oct-2019 17:11:23 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 9gvKLwCDGrR+YnwvXJXUW6jDQKm3PG1TNkQHc5uY+VLbmHjhcird8r2BATq4iBXtKXxJZ912FSDsNFccAi/iKQ==
X-Frame-Options DENY
X-Xss-Protection 0
zh-cn.facebook.com

https://zh-cn.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:13:03 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0Df8dIJBbrqOZPL9A..BZ1mgf.7W.AAA.0.0.BZ1mgf.AWVvJarc; expires=Wed, 03-Jan-2018 17:13:03 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=H2jWWd77qdXar7ZcuD-ZyIZq; expires=Sat, 05-Oct-2019 17:13:03 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug x9gwzQLaX49KtxGmtsXaZ+ak6GVA0fjkXDmpIRRAmdJr90Sxaaehu/yJ5JR6biijkZm20oU9F0W7SMxFkASG7g==
X-Frame-Options DENY
X-Xss-Protection 0
zh-cn.facebook.com

http://zh-cn.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:13:27 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0uMYxaoITIrxedElp..BZ1mg3.Uh.AAA.0.0.BZ1mg3.AWXd98aZ; expires=Wed, 03-Jan-2018 17:13:27 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=N2jWWW9mxemjfNLuJIV5_SqF; expires=Sat, 05-Oct-2019 17:13:27 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug FK9PeUWzykfF00ZBvf4gK8qBM+FfRcqy0pH/moJoNIuP53knup1soQI6V8gG4pnimPooXjcNaxV225qWe1Sd8Q==
X-Frame-Options DENY
X-Xss-Protection 0
zh-hk.facebook.com

https://zh-hk.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:49:43 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug 4ZYCllf/RqxNV8FnsQewzhiGdEpAocM4OI/DT3zPFY0AiJaZ3km+KWd9J2hv695UWlnyQ1uDfERR/Prf2N2A3Q==
X-Frame-Options DENY
X-Xss-Protection 0
zh-hk.facebook.com

http://zh-hk.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:28:15 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0dFGYnORDg9ALjOIx..BZ1muv.Aj.AAA.0.0.BZ1muv.AWWDzcqb; expires=Wed, 03-Jan-2018 17:28:15 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=r2vWWfAvPWHHEB24UjgxmGUP; expires=Sat, 05-Oct-2019 17:28:15 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug KuXxQtwK3OzWdiwEFHrlrbK3+UyIMp7Kf4O6sAV+Php/xhaWtQWvYHSSwYBYSQsdceoyzU9H8Ok+Aufnw92wNA==
X-Frame-Options DENY
X-Xss-Protection 0
zh-tw.facebook.com

http://zh-tw.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:26:15 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0NANTUIFVkUFO3kKZ..BZ1l0n.9l.AAA.0.0.BZ1l0n.AWVjbVs8; expires=Wed, 03-Jan-2018 16:26:15 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=J13WWUtwletdtJxXcjSVhVWq; expires=Sat, 05-Oct-2019 16:26:15 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug XQtL0E1OQiI6C3TN8wspXGoHw6E99hC+l5lCz4zbADumGuB00zs4ouA1PHP+RTM+cLNlhQ16UesQvPR167CFbg==
X-Frame-Options DENY
X-Xss-Protection 0
zh-tw.facebook.com

https://zh-tw.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:42:31 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug /+9bWB2Fzm+4fayOmJXljWmA79kkXrdBlw8knj3vAxQCwEDAm3gL3bySvq5W0tYEEchlSm7aTTI6rsIUrAIw9g==
X-Frame-Options DENY
X-Xss-Protection 0
ziffdavis.facebook.com

http://ziffdavis.facebook.com/ source code | headers | screenshot

200 OK  
Content-Length 1569
Content-Type text/html;charset=utf-8
Date Thu, 05 Oct 2017 16:16:40 GMT
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Fb-Debug Op8L3D0x8pSwjcnC9ir0S3zugOVy7TyHBoKmKlBNSV+DdIIA9QPofiY3sX1eAOkFDUdLzRJ/wUh1KsNaBcM2/Q==
ziffdavis.facebook.com

https://ziffdavis.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:24:12 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0RVS3MwhXcckpIWA3..BZ1mq7.ld.AAA.0.0.BZ1mq7.AWWcU86y; expires=Wed, 03-Jan-2018 17:24:11 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=u2rWWZ9clpYfMO5pppoNLBKQ; expires=Sat, 05-Oct-2019 17:24:11 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug IkY9H6qmporjJYgzUoiAj6w43H93z6HFoZYLcfrjXRnqTqq70qKiPkuKADjszeX2J3+eWL3uearJKgCHAdGjWg==
X-Frame-Options DENY
X-Xss-Protection 0
zodiac.facebook.com

https://zodiac.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:34:55 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0ZPw3K3tdEf2d3L2m..BZ1l8v.E0.AAA.0.0.BZ1l8v.AWXfQagB; expires=Wed, 03-Jan-2018 16:34:55 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=L1_WWRxYPXPD3Wd1WJsh7W5i; expires=Sat, 05-Oct-2019 16:34:55 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug RrrsnY4BmNx1uZf2RgYYumyeNAMElA3FuAajF3wTuni6/gZJIuOYEYKDv8NTs3sQHcrZH8b3+FrvfCb3+OANzA==
X-Frame-Options DENY
X-Xss-Protection 0
zodiac.facebook.com

http://zodiac.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://zodiac.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:01:29 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug ozGnsPpDiJDpQlwq/qPP8wnU8wE3fqWhqj99LolhPLTdvQJb4iq0/FPi9Bw+/raBSNf/t2pONJ2vMeC4OcD2EQ==
X-Frame-Options DENY
X-Xss-Protection 0
zomato.facebook.com

https://zomato.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:48:07 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0Id6k3mHzbdXhVhMI..BZ1mJH.AM.AAA.0.0.BZ1mJH.AWW-jqMh; expires=Wed, 03-Jan-2018 16:48:07 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=R2LWWYGgG0wc0A-XXFVNW_2z; expires=Sat, 05-Oct-2019 16:48:07 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug rIKfG815TY08Zt2YwlUpGOoBSmF/E4ht3VVxlEBrjMNDZhvLR8YqF+yTalJoe25XdEHG4RylFL7YcXXts8MLTw==
X-Frame-Options DENY
X-Xss-Protection 0
zomato.facebook.com

http://zomato.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://zomato.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:18:59 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug xmss5hDUyC0w1Op4HN7r4UIjz7KliQucbyQMrfJ+N5m0tNqKTlrEgPh5jz/KkTJVHYMYBf/G7WOU+0I6YuzOLQ==
X-Frame-Options DENY
X-Xss-Protection 0
zoo.facebook.com

http://zoo.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://zoo.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:16:25 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug ip2zdQNv6Fi68RBmlsSO7PSoQ4zaUScrOTNEGKrtGs9N8neiEHZ7cpDmXSDaUwL8RvM2PflSvpBffzpL7gqRtQ==
X-Frame-Options DENY
X-Xss-Protection 0
zoo.facebook.com

https://zoo.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:27:18 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0rBnFWOcuaoYAozb6..BZ1mt2.0C.AAA.0.0.BZ1mt2.AWUi5B5y; expires=Wed, 03-Jan-2018 17:27:18 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=dmvWWTq1v8LHHQ75MNPxYjSx; expires=Sat, 05-Oct-2019 17:27:18 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug vAi/Q8iauj+1N4rDz2GruuK0Wc/ZQmrk5hHkKKScvxABI2ZSXe2Q1cRSWoZ7d7ACGImvFObwTSM3A8XnQuICFw==
X-Frame-Options DENY
X-Xss-Protection 0
zoom.facebook.com

http://zoom.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://zoom.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:13:48 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug zrq4RxEDXcKFMHrFOjK9rYeEzY4GRz+IvYOCOdvYPAFtnaIHOi/X+/3KfbMOYWjQli33QM13vLaE3WCYnLBsQg==
X-Frame-Options DENY
X-Xss-Protection 0
zoom.facebook.com

https://zoom.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 17:22:47 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug u3j/yVHluvOGYJ9APYtZX9mwh/0gAl52wmOK6kEFc7rRUjtvczYdaU1pAJjL0Nj/exZsPlIC3AhFvQ3z7frgWA==
X-Frame-Options DENY
X-Xss-Protection 0
zu-za.facebook.com

http://zu-za.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:16:48 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0ovOquxB30T9Vjv8Y..BZ1lrw.Pz.AAA.0.0.BZ1lrw.AWUCCU-k; expires=Wed, 03-Jan-2018 16:16:48 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=8FrWWZr5-_7i8ZmIq4mGCjNj; expires=Sat, 05-Oct-2019 16:16:48 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug HmKYOVvtDuuDp3ML8Q8/lCqRVQFruIuyiEP3zgBK27DWsqzOzMkUHL4nC/r7T+USolFhZw1uSVoxtV+Nk9R+5w==
X-Frame-Options DENY
X-Xss-Protection 0
zu-za.facebook.com

https://zu-za.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:32:10 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=0goAhL0Nc3V3FDxK3..BZ1l6K.Ve.AAA.0.0.BZ1l6K.AWWhug7v; expires=Wed, 03-Jan-2018 16:32:10 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=il7WWYHVjek5_q_64CTMNqQs; expires=Sat, 05-Oct-2019 16:32:10 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug vxuNV6tc+p7zlZstD5YVX/3MP3BCI9H74AQr8GvPgA8U/LtkS9fw3dSYlJbDN0/M9eGkTDBx1bBiyL5+swcycw==
X-Frame-Options DENY
X-Xss-Protection 0
zynga.facebook.com

http://zynga.facebook.com/ source code | headers | screenshot

200 OK  
Access-Control-Allow-Credentials true
Access-Control-Allow-Method OPTIONS
Access-Control-Allow-Origin https://zynga.facebook.com
Access-Control-Expose-Headers X-FB-Debug, X-Loader-Length
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:42:13 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Origin Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug F7A3j95JxeH+jvqCuSrZ1nGnRjT1IGbTgeYfDsCSsUtnBTT0ldsKJarsQWlMU29ExhoCtnxKJ62i+kbJF6oz4w==
X-Frame-Options DENY
X-Xss-Protection 0
zynga.facebook.com

https://zynga.facebook.com/ source code | headers | screenshot

200 OK  
Cache-Control private, no-cache, no-store, must-revalidate
Content-Security-Policy default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' chrome-extension://boadgeojelhgndaghljhdicfkmllpafd chrome-extension://dliochdbjfkdbacpmhlcpmleaejidimm;
Content-Type text/html; charset=UTF-8
Date Thu, 05 Oct 2017 16:58:11 GMT
Expires Sat, 01 Jan 2000 00:00:00 GMT
Pragma no-cache
Public-Key-Pins-Report-Only max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
Set-Cookie fr=08kgFCzdf94HM2fWd..BZ1mSj.dB.AAA.0.0.BZ1mSj.AWV-TZpl; expires=Wed, 03-Jan-2018 16:58:11 GMT; Max-Age=7776000; path=/; domain=.facebook.com; secure; httponly sb=o2TWWZO9ywYFBbRZKeEBHkNI; expires=Sat, 05-Oct-2019 16:58:11 GMT; Max-Age=63072000; path=/; domain=.facebook.com; secure; httponly
Status 200
Strict-Transport-Security max-age=15552000; preload
Vary Accept-Encoding
X-Content-Type-Options nosniff
X-Fb-Debug DHp447J0N7D7TMWklsr71WF3Jp+O965g+Hd4CskRumfm2r141vtY7j4SCrSY0Y91cwO7nAmU72VTqzCNjokHyA==
X-Frame-Options DENY
X-Xss-Protection 0