• H1 0
• H2 1
• H3 5
• H4 4
• STRONG 18
• A 5
• IMG 14

HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Wed, 16 Dec 2020 05:09:02 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://urewards.com:443/

HTTP/1.1 200 OK
Date: Wed, 16 Dec 2020 05:09:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
X-Frame-Options: DENY
Access-Control-Allow-Methods: POST, GET
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=15552000; includeSubDomains;
X-XSS-Protection: 1; mode=block
X-Xss-Pwnage: <script>alert('XSS');</script>
Feature-Policy: accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; usb 'none'
Referrer-Policy: strict-origin-when-cross-origin
Content-Security-Policy: default-src 'self'; script-src *.urewards.com *.pusher.com www.google-analytics.com www.google.com code.highcharts.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://js.stripe.com ; style-src 'unsafe-inline' *.urewards.com *.stripe.com code.jquery.com fonts.googleapis.com cloud.typography.com maxcdn.bootstrapcdn.com ; img-src * data: ; font-src 'self' *.urewards.com data: fonts.googleapis.com fonts.gstatic.com cloud.typography.com maxcdn.bootstrapcdn.com ; upgrade-insecure-requests; block-all-mixed-content ; frame-src https://www.google.com/recaptcha/ https://hooks.stripe.com https://js.stripe.com; connect-src 'self' *.urewards.com *.pusherapp.com  *.pusher.com https://api.stripe.com https://cdn.plyr.io/; media-src https://rewardian-assets.s3.amazonaws.com/
Set-Cookie: PHPSESSID=0ml8llql3gf6rnddcucflm5a3d; path=/; domain=.urewards.com; secure; HttpOnly; SameSite=Lax
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
expires: max
Pragma: public
Cache-Control: public, must-revalidate, proxy-revalidate