confettiboxcompany.com

Http-Version: 1.1
Status-Code: 200
Status: 200 OK
Server: Apache
Strict-Transport-Security: max-age=631138520; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
Content-Security-Policy-Report-Only: default-src * data: www.etsystudio.com; script-src 'unsafe-inline' 'unsafe-eval' data: www.etsy.com https://*.etsystatic.com *.googletagmanager.com *.go-mpulse.net *.btstatic.com *.google-analytics.com *.netmng.com *.googleadservices.com *.facebook.net *.facebook.com *.google.com *.dwin1.com *.tumblr.com *.twitter.com *.steelhousemedia.com t.cxt.ms connexity.net *.gstatic.com *.answerscloud.com bam.nr-data.net g.3gl.net js-agent.newrelic.com *.qualtrics.com app.link *.branch.io *.mparticle.com cdn.ravenjs.com s.pinimg.com *.pinterest.com googleads.g.doubleclick.net web.btncdn.com cdn.ravenjs.com *.googleapis.com *.zdassets.com *.cloudflare.com *.granify.com *.tiles.mapbox.com www.etsystudio.com; style-src 'unsafe-inline' 'self' www.etsy.com *.tiles.mapbox.com www.etsystudio.com; connect-src https://*.etsystatic.com *.mparticle.com *.qualtrics.com *.branch.io www.etsy.com wss://www.etsy.com api.pinterest.com *.zdassets.com *.zendesk.com wss://*.zopim.com wss://*.zendesk.com *.granify.com *.tiles.mapbox.com www.etsystudio.com; report-uri /beacon/csp.php
X-XSS-Protection: 1; mode=block; report=/beacon/csp.php
X-Content-Type-Options: nosniff
X-Recruiting: Is code your craft? https://www.etsy.com/careers
Content-Encoding: gzip
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Type: text/html; charset=UTF-8
Via: 1.1 varnish
x-fastly-backend-reqs: 337
Accept-Ranges: bytes
Age: 0
Transfer-Encoding: chunked
Date: Mon, 17 Sep 2018 22:23:15 GMT
Connection: keep-alive
X-Served-By: cache-pao17428-PAO
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1537222995.140317,VS0,VE312
Vary: Accept-Encoding