Via: 1.1 c49af0736096dd9eb595aafed0498ed4.cloudfront.net (CloudFront)

Date: Fri, 26 Jul 2024 01:13:51 GMT

Server: CloudFront

X-Cache: Redirect from cloudfront

Location: https://portal.uid1.alpha.ui.com/

X-Amz-Cf-Id: eLAEP7iuBNlOOH29Qlzg0MEweHBwnq0V9CUS0G0hxbq1Dz9nVqN1DA==

Content-Type: text/html

X-Amz-Cf-Pop: JFK52-P4

Content-Length: 167

Referrer-Policy: strict-origin-when-cross-origin

X-Frame-Options: DENY

X-Xss-Protection: 1; mode=block

X-Content-Type-Options: nosniff

Content-Security-Policy: default-src 'self'; script-src 'self' *.ui.com 'sha256-Bh8BRvieOQR4hziE26uqImfEjoj2bKC84/GtWaHLzwQ=' 'sha256-brNTulgsxV2wMk5ozs/cma8EvBZY10/LIgBE56oln/Q=' 'sha256-0KSuy0EAVzpXke64lXJG5GP5RL+7sw85r01dtYDpeeI=' https://d2yyd1h5u9mauk.cloudfront.net https://recaptcha.net https://www.gstatic.com https://www.gstatic.cn https://www.google-analytics.com https://ssl.google-analytics.com https://*.googletagmanager.com https://js.stripe.com https://sdk.twilio.com; style-src 'self' 'unsafe-inline'; connect-src data: *.ubnt.com *.ui.com wss://*.ui.direct https://*.ui.direct *.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://web.delighted.com https://delighted.com wss://ws.pusherapp.com wss://global.vss.twilio.com wss://sdkgw.us1.twilio.com https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com https://pactsafe.io https://*.agora.io wss://*.edge.agora.io https://*.agora.io wss://*.edge.agora.io wss://webrtc-cloud-proxy.agora.io https://*.sd-rtn.com wss://*.sd-rtn.com https://*.iot.us-west-2.amazonaws.com wss://*.iot.us-west-2.amazonaws.com https://*.s3-eu-west-2.amazonaws.com https://*.s3.eu-west-2.amazonaws.com https://*.s3.dualstack.eu-west-2.amazonaws.com ; img-src 'self' *.ui.com https://www.google-analytics.com https://*.googletagmanager.com https://static.ubnt.com data: blob:; frame-src https://recaptcha.net https://js.stripe.com *.ui.com ; font-src 'self'; worker-src 'self' blob:; media-src 'self' mediastream: cf1.uid1.ui.com cf2.uid1.ui.com;

Via: 1.1 f52a6d89da5cd85d46c2c4e4af9acf1e.cloudfront.net (CloudFront)

Date: Fri, 26 Jul 2024 01:13:51 GMT

Etag: W/"669f1fe3-7e1"

Vary: Accept-Encoding

Server: nginx

Expires: Fri, 26 Jul 2024 01:13:50 GMT

X-Cache: Miss from cloudfront

X-Amz-Cf-Id: tbCadSI3b9Xp3GCuLxO20fXS5MhptKq9x3eovixLvtf9WuiRyv6g-A==

Content-Type: text/html

X-Amz-Cf-Pop: JFK52-P4

Cache-Control: no-cache, no-cache, max-age=0

Last-Modified: Tue, 23 Jul 2024 03:13:39 GMT

Referrer-Policy: strict-origin-when-cross-origin

X-Frame-Options: DENY

X-Xss-Protection: 1; mode=block

X-Content-Type-Options: nosniff

Content-Security-Policy: default-src 'self'; script-src 'self' *.ui.com 'sha256-Bh8BRvieOQR4hziE26uqImfEjoj2bKC84/GtWaHLzwQ=' 'sha256-brNTulgsxV2wMk5ozs/cma8EvBZY10/LIgBE56oln/Q=' 'sha256-0KSuy0EAVzpXke64lXJG5GP5RL+7sw85r01dtYDpeeI=' https://d2yyd1h5u9mauk.cloudfront.net https://recaptcha.net https://www.gstatic.com https://www.gstatic.cn https://www.google-analytics.com https://ssl.google-analytics.com https://*.googletagmanager.com https://js.stripe.com https://sdk.twilio.com; style-src 'self' 'unsafe-inline'; connect-src data: *.ubnt.com *.ui.com wss://*.ui.direct https://*.ui.direct *.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://web.delighted.com https://delighted.com wss://ws.pusherapp.com wss://global.vss.twilio.com wss://sdkgw.us1.twilio.com https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com https://pactsafe.io https://*.agora.io wss://*.edge.agora.io https://*.agora.io wss://*.edge.agora.io wss://webrtc-cloud-proxy.agora.io https://*.sd-rtn.com wss://*.sd-rtn.com https://*.iot.us-west-2.amazonaws.com wss://*.iot.us-west-2.amazonaws.com https://*.s3-eu-west-2.amazonaws.com https://*.s3.eu-west-2.amazonaws.com https://*.s3.dualstack.eu-west-2.amazonaws.com ; img-src 'self' *.ui.com https://www.google-analytics.com https://*.googletagmanager.com https://static.ubnt.com data: blob:; frame-src https://recaptcha.net https://js.stripe.com *.ui.com ; font-src 'self'; worker-src 'self' blob:; media-src 'self' mediastream: cf1.uid1.ui.com cf2.uid1.ui.com;

Strict-Transport-Security: max-age=31536000; includeSubDomains