hownow.app Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Sat, 23 Aug 2025 06:58:53 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://hownow.app:443/

HTTP/1.1 302 Found
Date: Sat, 23 Aug 2025 06:58:54 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Status: 302 Found
Cache-Control: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Request-Id: b5eb338e-abcd-4e9c-b4d7-09c03fc0ff8c
Location: https://hownow.app/users/sign_in

HTTP/1.1 200 OK
Date: Sat, 23 Aug 2025 06:58:54 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Status: 200 OK
Cache-Control: no-cache, no-store
Vary: Accept-Encoding
Content-Encoding: gzip
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"csp_endpoint","max_age":14400,"endpoints":[{"url":"/csp_reports"}]}
X-Permitted-Cross-Domain-Policies: none
Pragma: no-cache
X-XSS-Protection: 1; mode=block
Cross-Origin-Embedder-Policy: unsafe-none
Strict-Transport-Security: max-age=15552000; includeSubDomains
machine: ip-172-31-40-243
X-Request-Id: ec491d1e-da6e-4e87-912c-2c62d7dd812c
Cross-Origin-Resource-Policy: cross-origin
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' https://*.wistia.com https://*.wistia.net https://*.pusher.com; base-uri 'self'; connect-src 'self' https://*.intercom.io https://*.fontawesome.com https://noembed.com https://cdn.plyr.io https://*.pusher.com https://*.googleapis.com https://bugherd.com https://*.bugherd.com https://*.wistia.com https://*.wistia.net https://*.bugsnag.com https://*.tiny.cloud https://vimeo.com https://*.vimeo.com https://*.googleusercontent.com https://*.intercomcdn.com https://*.tokbox.com https://*.opentok.com https://*.google.com https://google.com https://*.google-analytics.com https://google-analytics.com https://*.doubleclick.net https://embedwistia-a.akamaihd.net https://*.litix.io https://api.glitch.com *.tinymce.com https://*.gstatic.com *.google.com https://uploads.intercomcdn.eu https://uploads.intercomusercontent.com data: blob: wss: https://images.unsplash.com https://api-js.mixpanel.com https://cdn.mxpnl.com; font-src 'self' https://*.fontawesome.com https://*.wistia.com https://*.wistia.net https://*.cloudfront.net https://*.bugherd.com https://fonts.intercomcdn.com https://js.intercomcdn.com https://*.cdnfonts.com https://*.bootstrapcdn.com https://*.gstatic.com *.tinymce.com *.tiny.cloud https://*.typekit.net data:; frame-ancestors 'self'; frame-src 'self' http: https:; img-src 'self' http: https: data: blob: file:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://bugherd.com https://*.bugherd.com https://*.intercom.io https://*.intercomcdn.com https://*.intercom.com https://stats.pusher.com https://*.pusher.com https://*.rawgit.com https://*.zencdn.net https://*.cloudflare.com https://*.tiny.cloud https://*.fontawesome.com https://*.google.com https://*.googleapis.com https://*.wistia.com https://*.wistia.net https://*.wistia.st https://*.cloudfront.net https://addtocalendar.com https://*.addevent.com https://addevent.com https://www.youtube.com https://*.vimeocdn.com https://*.vimeo.com https://*.tokbox.com https://*.opentok.com https://*.jquery.com https://*.google-analytics.com https://google-analytics.com https://*.gstatic.com https://src.litix.io https://button.glitch.me *.tinymce.com *.googleusercontent.com blob: https://*.mxpnl.com https://*.sentry-cdn.com https://*.intercomcdn.com; media-src 'self' https://*.wistia.com https://*.gstatic.com https://*.intercomcdn.com https://embedwistia-a.akamaihd.net https://*.wistia.net data: blob:; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.datatables.net https://*.bootstrapcdn.com https://*.tiny.cloud https://*.wistia.com https://*.wistia.net https://bugherd.com https://*.bugherd.com https://*.cloudfront.net https://addtocalendar.com https://*.fontawesome.com https://button.glitch.me *.tinymce.com https://accounts.google.com https://*.jquery.com https://www.gstatic.com; worker-src 'self' blob:; child-src 'self' https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net; report-uri /csp_reports; report-to csp_endpoint
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Set-Cookie: _hn_app_session=5fb99fd2ea990420beab62f53e2814c9; path=/; expires=Mon, 22 Sep 2025 06:58:54 GMT; secure; HttpOnly; SameSite=Lax