HTTP/1.1 200 OK
Server: nginx
Date: Mon, 21 Oct 2019 02:12:17 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: frontend=8af88ed98257d83a5f565b9228b1e580; expires=Thu, 31-Oct-2019 02:12:17 GMT; Max-Age=864000; path=/; domain=ammo.com; secure; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"csp-endpoint","max-age":31536000,"endpoints":[{"url":"https://sentry.io/api/1201369/security/?sentry_key=66651cc2476b475987e75acc58880acc"}]}
Content-Security-Policy: script-src seal.verisign.com widgets.pinterest.com api.bufferapp.com www.linkedin.com *.agechecker.net *.userway.org *.algolia.io *.facebook.com *.facebook.net *.twitter.com chat.freshdesk.com *.pusher.com d36mpcpuzc4ztk.cloudfront.net *.freshchat.com freegeoip.net data: *.sumome.com *.sumo.com sumo.b-cdn.net sumome-140a.kxcdn.com reddit.com buttons.reddit.com www.reddit.com *.youtube.com https://*.akamaihd.net https://*.fbcdn.net *.zdassets.com *.zopim.com blob: 'unsafe-inline' 'unsafe-eval' code.jquery.com *.gstatic.com stats.g.doubleclick.net *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com d1w4q6ldc8l0qo.cloudfront.net 'self'; img-src d1w4q6ldc8l0qo.cloudfront.net about: *.agechecker.net *.facebook.com twitter.com syndication.twitter.com *.freshdesk.com s3.amazonaws.com d36mpcpuzc4ztk.cloudfront.net sumo.com *.sumo.com sumo.b-cdn.net data: *.facebook.net https://*.akamaihd.net https://*.fbcdn.net *.zopim.io stats.g.doubleclick.net *.gstatic.com *.google-analytics.com *.googleapis.com 'self'; font-src data: *.agechecker.net *.facebook.com *.googleapis.com *.gstatic.com themes.googleusercontent.com d1w4q6ldc8l0qo.cloudfront.net 'self'; connect-src *.agechecker.net *.userway.org userway.org *.algolia.io *.algolianet.com *.algolia.net *.facebook.com *.freshdesk.com wss://chat.freshdesk.com wss://ws.pusherapp.com wss://ws.pusherapp.com:443 *.pusher.com sumo.com *.sumo.com *.youtube.com *.zdassets.com *.zendesk.com wss://widget-mediator.zopim.com *.zopim.com *.google.com *.googleapis.com *.google-analytics.com stats.g.doubleclick.net code.jquery.com *.googletagmanager.com 'self'; media-src *.agechecker.net *.facebook.com d36mpcpuzc4ztk.cloudfront.net *.youtube.com *.zdassets.com *.zopim.com 'self'; style-src *.agechecker.net *.facebook.com *.twitter.com d36mpcpuzc4ztk.cloudfront.net *.freshchat.com sload.sumo.com sumo.b-cdn.net 'unsafe-inline' *.gstatic.com *.googleapis.com *.google.com d1w4q6ldc8l0qo.cloudfront.net 'self'; object-src *.facebook.com *.youtube.com 'self'; frame-src *.facebook.com *.twitter.com twitter.com *.freshchat.com sumo.com *.youtube.com *.facebook.net https://*.akamaihd.net https://*.fbcdn.net *.googleapis.com *.google.com 'self'; default-src 'self'; manifest-src d1w4q6ldc8l0qo.cloudfront.net ammo.com; report-uri https://sentry.io/api/1201369/security/?sentry_key=66651cc2476b475987e75acc58880acc
Strict-Transport-Security: max-age=15552000
Referrer-Policy: no-referrer-when-downgrade
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block;