ALSSCAN.COM Website Review

HTTP/1.1 301 Moved Permanently
Content-length: 0
Location: https://www.alsscan.com/

HTTP/1.1 200 OK
Server: nginx/1.15.6
Date: Thu, 23 Nov 2023 15:44:02 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Service-Worker-Allowed: /
Set-Cookie: _csrf=7f1xN-7ZkKNpvRvIolqwD4Qa; Path=/; HttpOnly; Secure
Set-Cookie: msite_prod_GoId=1b854fd1-4f2a-43c7-9ea3-b33895b24a5b; Domain=.undefined; Path=/
Set-Cookie: site_test=; Domain=.alsscan.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie: site_test_order=; Domain=.alsscan.com; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
Content-Security-Policy: prefetch-src *.b-cdn.net *.metartnetwork.com *.metart.com *.hustler.com *.metartmoney.com *.google-analytics.com *.googletagmanager.com;default-src 'self' blob: *.b-cdn.net *.metartnetwork.com *.metart.com *.hustler.com;connect-src 'self' blob: wss: *.b-cdn.net *.metartnetwork.com *.metart.com *.zdassets.com *.zendesk.com *.atlassian.com *.atl-paas.net *.hustler.com *.metart.network *.google.com *.google-analytics.com *.googleapis.com *.doubleclick.net *.mixpanel.com *.metartmoney.com cdn.cookielaw.org *.visualwebsiteoptimizer.com *.vwo.com *.sentry.io *.adtng.com *.atsptp.com;style-src 'self' blob: 'unsafe-inline' *.b-cdn.net *.metartnetwork.com *.metart.com *.googleapis.com fonts.gstatic.com platform.twitter.com *.twimg.com maxcdn.bootstrapcdn.com *.google.com *.hustler.com cdn.cookielaw.org *.visualwebsiteoptimizer.com *.vwo.com;font-src 'self' data: *.b-cdn.net *.metartnetwork.com *.metart.com *.zopim.com fonts.gstatic.com *.googleapis.com ssl.p.jwpcdn.com maxcdn.bootstrapcdn.com *.hustler.com *.vwo.com;script-src 'self' 'unsafe-inline' *.b-cdn.net *.metartnetwork.com *.metart.com *.zdassets.com *.atlassian.com *.zopim.com *.twitter.com *.twimg.com ssl.p.jwpcdn.com *.googletagmanager.com *.google-analytics.com cdn.mouseflow.com *.google.com cdn.polyfill.io *.hustler.com *.metart.network cdn.cookielaw.org code.jquery.com geolocation.onetrust.com *.mxpnl.com *.googleapis.com *.gstatic.com *.browser-update.org browser-update.org *.visualwebsiteoptimizer.com *.vwo.com *.adtng.com *.atsptp.com;frame-src 'self' *.b-cdn.net *.metartnetwork.com *.metart.com *.twitter.com *.hustler.com *.youtube.com *.vimeo.com *.atlassian.net *.metartmoney.com *.visualwebsiteoptimizer.com *.vwo.com;img-src 'self' data: *.b-cdn.net *.metartnetwork.com *.metart.com *.nsimg.net *.twimg.com *.twitter.com *.zopim.com jwpltx.com *.google-analytics.com *.gstatic.com *.googletagmanager.com *.googleapis.com *.doubleclick.net *.google.com *.hustler.com *.browser-update.org browser-update.org *.visualwebsiteoptimizer.com *.vwo.com *.hustlerlive.com *.barelylegallive.com *.vscdns.com;media-src 'self' data: blob: *.b-cdn.net *.metartnetwork.com *.metart.com *.nsimg.net *.hustler.com *.zdassets.com *.visualwebsiteoptimizer.com *.vwo.com;worker-src 'self' data: blob: wss:;object-src 'none'
Cross-Origin-Resource-Policy: cross-origin
X-DNS-Prefetch-Control: off
Expect-CT: max-age=0
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
Origin-Agent-Cluster: ?1
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer
X-XSS-Protection: 0
ETag: W/"e9dc-uISGuCKUimxgEt2Pgpamyz/hDNE"
Vary: Accept-Encoding
Content-Encoding: gzip
X-Cache-Status: MISS