HTTP/1.1 200 OK
Content-Security-Policy-Report-Only: script-src 'self' https://assets.tumblr.com https://sb.scorecardresearch.com/beacon.js https://ssl.google-analytics.com/ga.js https://www.google-analytics.com/analytics.js https://fc.yahoo.com/sdarla/php/client.php https://s.yimg.com/rq/darla/ https://www.googletagservices.com/tag/js/gpt.js https://securepubads.g.doubleclick.net/gpt/ https://securepubads.g.doubleclick.net/gampad/ads https://pagead2.googlesyndication.com/pagead/osd.js https://www.google.com/recaptcha/api.js https://consent.cmp.oath.com https://*.gemini.yahoo.com https://s.yimg.com/av/gemini/ga/gemini-iframe.js https://s.yimg.com/av/curveball/ 'unsafe-eval' 'nonce-tXtKaRZzP8VCBgTITSQ4LkCqo'; object-src 'none'; worker-src blob:; base-uri 'self';
Content-Type: text/html; charset=UTF-8
Date: Fri, 26 Jun 2020 13:00:20 GMT
P3p: CP="Tumblr's privacy policy is available here: https://www.tumblr.com/policy/en/privacy"
Referrer-Policy: origin-when-cross-origin
Server: openresty
Set-Cookie: pfg=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.tumblr.com; secure; HttpOnly
Set-Cookie: tmgioct=5ef5f1646cd0b20566086570; expires=Mon, 24-Jun-2030 13:00:20 GMT; Max-Age=315360000; path=/; domain=.tumblr.com; HttpOnly
Strict-Transport-Security: max-age=31536000; preload
Vary: Accept-Encoding
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Rid: 1636170932605757683812375174157350111737
X-UA-Compatible: IE=Edge,chrome=1
X-Xss-Protection: 1; mode=block
Transfer-Encoding: chunked