Headers of http://npw.net

HTTP/1.1 301 Moved Permanently
Server
nginx
Date
Mon, 05 Sep 2016 19:19:41 GMT
Content-Type
text/html
Content-Length
178
Connection
close
Location
https://npw.net/
X-Content-Type-Options
nosniff
HTTP/1.1 302 Found
Server
nginx
Date
Mon, 05 Sep 2016 19:19:42 GMT
Content-Type
text/html; charset=UTF-8
Connection
close
X-Powered-By
PHP/7.0.10
Set-Cookie
oc7dhh7tx4uu=g75ihmp78tf5vo4aqvsvk1q8u5; path=/; HttpOnly
Expires
Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control
no-store, no-cache, must-revalidate
Pragma
no-cache
Set-Cookie
oc_sessionPassphrase=TD1PZ4Z7ltWkrQ%2FlsdQu%2Bkpr%2Fxsh9vL3kdxK16UmuExff38yMNpyjicMF45BIraQoS4VPVc9cx9mXRNZXh5ejYkmh2bcbvJegjXBYbXKxZ992YMG0ff5Jfgy8H8jVg7B; path=/; secure; HttpOnly
Content-Security-Policy
default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *
Set-Cookie
nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
Set-Cookie
nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
Location
https://npw.net/index.php/login
Strict-Transport-Security
max-age=15768000; includeSubDomains; preload;
X-Frame-Options
SAMEORIGIN
X-Content-Type-Options
nosniff
X-XSS-Protection
1; mode=block
X-Robots-Tag
none
X-Download-Options
noopen
X-Permitted-Cross-Domain-Policies
none
X-Content-Type-Options
nosniff
Public-Key-Pins
pin-sha256="CZeg7mDGvT3BADXMB5dInqItc0SdOU7X02jlOyMZznE="; pin-sha256="DhXA7q++QjzTyQR3eg/xRRD54YaMrHbvmKs8JJL9tYQ="; max-age=15768000
X-Robots-Tag
none
X-Download-Options
noopen
HTTP/1.1 200 OK
Server
nginx
Date
Mon, 05 Sep 2016 19:19:42 GMT
Content-Type
text/html; charset=UTF-8
Content-Length
10835
Connection
close
Vary
Accept-Encoding
Vary
Accept-Encoding
X-Powered-By
PHP/7.0.10
Set-Cookie
oc7dhh7tx4uu=rt4muco1ev9edtpc4g5pbnnug7; path=/; HttpOnly
Expires
Thu, 19 Nov 1981 08:52:00 GMT
Pragma
no-cache
Set-Cookie
oc_sessionPassphrase=2SKXsKCK6xcFAmPBqOHzvDHTQj3Q0uKHeef7aMbDxx97OteRkOcO%2B5O3tDnKclCCDNV4pec0z5k6AHvtl6Q4WA9aMAnuhgq1rsgwkLn2dLNKRpyux18VbfQGbyTj76fo; path=/; secure; HttpOnly
Set-Cookie
nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
Set-Cookie
nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
Cache-Control
no-cache, must-revalidate
Content-Security-Policy
default-src 'none';script-src 'self' 'unsafe-eval';style-src 'self' 'unsafe-inline' 'unsafe-inline';img-src 'self' data: blob:;font-src 'self';connect-src 'self';media-src 'self' blob:;child-src 'self'
Strict-Transport-Security
max-age=15768000; includeSubDomains; preload;
X-Frame-Options
SAMEORIGIN
X-Content-Type-Options
nosniff
X-XSS-Protection
1; mode=block
X-Robots-Tag
none
X-Download-Options
noopen
X-Permitted-Cross-Domain-Policies
none
X-Content-Type-Options
nosniff
Public-Key-Pins
pin-sha256="CZeg7mDGvT3BADXMB5dInqItc0SdOU7X02jlOyMZznE="; pin-sha256="DhXA7q++QjzTyQR3eg/xRRD54YaMrHbvmKs8JJL9tYQ="; max-age=15768000
X-Robots-Tag
none
X-Download-Options
noopen