ouropal.com Review

 N/A

HTTP/1.1 301 Moved Permanently
Server: nginx/1.21.6
Date: Thu, 11 Aug 2022 05:30:58 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://ouropal.com/

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 11 Aug 2022 05:30:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: https://*.ouropal.com
Access-Control-Max-Age: 1728000
Cache-Control: max-age=0, private, must-revalidate
Content-Encoding: deflate
Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ouropal.com platform.twitter.com *.nr-data.net *.mixpanel.com *.pendo.io *.instana.io *.totango.com *.typeform.com *.zendesk.com *.fullstory.com *.opalstaticassets.com *.ouropal.com *.cloudfront.net translate.google.com *.googleapis.com *.intercom.io *.intercomcdn.com; style-src 'self' data: 'unsafe-inline' *.ouropal.com *.nr-data.net *.mixpanel.com *.pendo.io *.totango.com *.typeform.com *.zendesk.com *.fullstory.com *.opalstaticassets.com *.ouropal.com *.cloudfront.net *.intercomcdn.com *.gstatic.com translate.google.com *.googleapis.com; img-src 'self' data: *.ouropal.com *.nr-data.net *.mixpanel.com *.pendo.io *.instana.io *.totango.com *.typeform.com *.zendesk.com *.fullstory.com *.opalstaticassets.com *.ouropal.com *.cloudfront.net *.intercomcdn.com *.gstatic.com translate.google.com *.googleapis.com *.app.box.com *.cloudinary.com *.s3.amazonaws.com *.zencoder.com *.workwithopal.com *.embed.ly; font-src 'self' data: *.intercomcdn.com *.gstatic.com; connect-src 'self' *.ouropal.com ws://*.ouropal.com *.nr-data.net *.mixpanel.com wss://*.intercom.io *.intercom.io *.pendo.io *.instana.io pendo-io-extensions.storage.googleapis.com *.totango.com *.typeform.com *.zendesk.com *.fullstory.com *.app.box.com *.cloudinary.com *.zencoder.com *.workwithopal.com *.embed.ly *.s3.amazonaws.com; media-src 'self' *.ouropal.com *.app.box.com *.cloudinary.com *.s3.amazonaws.com *.zencoder.com cloudinary-cdn.workwithopal.com i.embed.ly; frame-src 'self' *.ouropal.com opal-eu.s3.eu-central-1.amazonaws.com opal-boeing.s3.amazonaws.com apple-assets.s3-us-west-2.amazonaws.com platform.twitter.com opal.s3.amazonaws.com opal.invisionapp.com fast.wistia.net workwithopal.app.box.com pendo-io-extensions.storage.googleapis.com app.pendo.io; object-src 'self'; frame-ancestors 'self' *.ouropal.com; report-uri /log/csp_violation
Etag: W/"a6d1cec2b3ce7462e739f71624bdfcc9"
Origin-Agent-Cluster: ?1
Set-Cookie: __opal_session=alZoUDIxM3VIOExpYVpteDJvYVNaNXo5TmMwczFqL0VXZHNxdU10TzlyNExoTm0zdWFVY3BrWHdFYWphdVRrcG9XUkhudnlpZWNHMXhVc2ZYUFJLbnRPNWxqY0ZzMll2L0dYNDVXWTNXVGhJMTluVk1CNkxTZmdjM2tVMVUvTEtMcDF3Y0d4Q2M3c2FxVXlrY2dZY0RDTDZ0aFJ1amJSVE9Bc0NndWlGWEJCRjF1MHNlR0tCK1BkYTdhVExBcHBvTDNxQ01Mdk5TckpWOCszQVlTWFZ0UT09LS1RMCtFK2ZPbDcyWENhbnVCQXJrVXpnPT0%3D--1d1280e21df12e3a09c40a4e8219ef169b193385; path=/; HttpOnly; Secure; secure; HttpOnly; SameSite=Lax
Status: 200 OK
Strict-Transport-Security: max-age=31557600; includeSubDomains; preload
Vary: Accept-Encoding,Origin
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Instana-S: 33355cdfa7415e01
X-Instana-T: 627cc7e67c3716a5
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 04d794a7-e2c5-4e23-8d08-f5e1ae1ee904
X-Xss-Protection: 1; mode=block
Content-Security-Policy: upgrade-insecure-requests