HTTP/1.1 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
Vary: User-Agent, Accept-Encoding
x-ua-compatible: IE=edge
p3p: CP="This is not a P3P policy. See https://www.pinterest.com/_/_/help/articles/pinterest-and-p3p for more info."
content-security-policy: script-src 'nonce-2878e34d4508285407496c844b6fd463' 'strict-dynamic' 'report-sample' 'self' *.pinterest.com *.pinimg.com *.google.com connect.facebook.net *.google-analytics.com *.facebook.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.adyen.com *.adyenpayments.com *.bnc.lt bnc.lt *.branch.io cdn.ampproject.org *.cdn.ampproject.org radar.cedexis.com *.cedexis-test.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' *.pinimg.com *.pinterest.com accounts.google.com *.branch.io *.facebook.com *.dropboxapi.com *.adyen.com *.adyenpayments.com cdn.ampproject.org *.cdn.ampproject.org pinterest-aberdeen.s3.amazonaws.com pinterest-anaheim.s3.amazonaws.com pinterest-media-upload.s3.amazonaws.com pinterest-poughkeepsie.s3.amazonaws.com pinterest-waterloo.s3.amazonaws.com pinterest-plymouth.s3.amazonaws.com *.cedexis.com *.cedexis-radar.net blob: *.appcues.com *.appcues.net *.bugsnag.com; media-src 'self' *.pinimg.com blob: data:; object-src 'self'; form-action 'self'; worker-src 'self' blob: https://www-pinterest-com.cdn.ampproject.org 'unsafe-inline'; base-uri 'none'; report-uri /_/_/csp_report/?rid=9144986185775544; frame-ancestors 'self'
content-security-policy-report-only: frame-src 'self' *.google.com *.pinimg.com *.pinterest.com *.pinterdev.com *.facebook.com player.grabnetworks.com www.kickstarter.com staging.slideshare.com player.anyclip.com verify.vote.org movieclips.com scache.vevo.com *.adyen.com www.voteplz.org player.hulu.com www.crackle.com www.dailymotion.com cache.vevo.com www.slideshare.net crackle.com embed.5min.com embed.ted.com register.vote.org absentee.vote.org www.crunchyroll.com videoplayer.vevo.com w.soundcloud.com embed-ssl.ted.com www.youtube.com player.vimeo.com vine.co scache.vevo.com bid.g.doubleclick.net *.fls.doubleclick.net pinterest-waterloo.s3.amazonaws.com pinlogs.s3.amazonaws.com advertising-delivery-metric-reports.s3.amazonaws.com; report-uri /_/_/csp_report/?reportonly
x-frame-options: SAMEORIGIN
Content-Type: text/html; charset=utf-8
Trailer: x-pinterest-sli-streamed-response-type
x-envoy-upstream-service-time: 75
x-pinterest-direct: true
pinterest-generated-by: coreapp-webapp-prod-0a01049c
Content-Encoding: gzip
pinterest-version: 93706ca
x-pinterest-rid: 9144986185775544
Date: Fri, 19 Jun 2020 04:28:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: csrftoken=13b0c2f9b770b0dbab8e739f11618e33; path=/; expires=Sat, 19 Jun 2021 04:28:55 GMT; secure
Set-Cookie: _pinterest_sess=TWc9PSZUNUw4MGlZQXN1ZDM4K3N5VUs2a2U5OTQ1eXhFa1VJSCtSdmRFS0tVTFZtcHg1Z1I4MEl2NENCa0xNUDVJeEY5VHUyZzNEYTdIcTFQS01HelJEQVFWbjcwOWJvS3BPYUNsUU8rQTYrLzhqMzk5Wi95Y1VYb3JqSjYvcGZUbE9GbUNpNGQ0Z21RNUpISWlqVy9PeGNvc1pGSGFOZTZmYkl6VmFpZk0yeFU1Q2o0SVJiUGFKM0JiTm8zRmFxdkdhTEkmRFBTTVg1NDFKU1RVR0VGKzkrK2VzblBkSlZZPQ==; path=/; expires=Mon, 14 Jun 2021 04:28:55 GMT; domain=.pinterest.com; samesite=None; secure; httponly
Set-Cookie: _auth=0; path=/; expires=Mon, 14 Jun 2021 04:28:55 GMT; domain=.pinterest.com; secure; httponly
Set-Cookie: _routing_id="5a5aa8cb-3769-4139-a6b0-86e09b5466ab"; Max-Age=86400; Path=/; HttpOnly
X-CDN: akamai
Strict-Transport-Security: max-age=31536000 ; includeSubDomains ; preload