'Spy pixels in emails have become endemic' - BBC News

HTTP/1.1 302 Found Server: EMX Date: Wed, 17 Feb 2021 19:05:25 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 228 Connection: keep-alive Location: https://www.bbc.com/news/technology-56071437 Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=3600 HTTP/1.1 200 OK Connection: keep-alive Content-Length: 219843 Content-Type: text/html X-Msig: ac7bc76287aacefca045e5d7eb815c7e moz-cache-status: HIT req-svc-chain: FASTLY,GTM,MOZART,BELFRAGE belfrage-cache-status: MISS bid: bruce brequestid: 77bc660b1e97407f95caacd82b6418c9 bsig: c171c1b608a2cf696fa487d9ba303223 cache-control: public, stale-if-error=90, stale-while-revalidate=30, max-age=30 content-security-policy-report-only: default-src tpc.googlesyndication.com *.safeframe.googlesyndication.com; script-src 'strict-dynamic' 'nonce-X+H6rlO9pJgVGZTATvWM5h7VU5SaXnAmBefAkirdZVlryCQXnV' 'self' 'report-sample' 'unsafe-inline' assets.wearehearken.com cdn.syndication.twimg.com connect.facebook.net emp.bbci.co.uk ems.wearehearken.com modules.wearehearken.com mybbc-analytics.files.bbci.co.uk nav.files.bbci.co.uk news.files.bbci.co.uk platform.twitter.com public.flourish.studio static.bbc.co.uk static.bbci.co.uk static.chartbeat.com static2.chartbeat.com www.bbc.co.uk www.instagram.com www.ons.gov.uk gn-web-assets.api.bbc.com www.google-analytics.com ad.crwdcntrl.net adservice.google.co.uk adservice.google.com bbc.gscontxt.net bcp.crwdcntrl.net cdn.ampproject.org collector.effectivemeasure.net me-ssl.effectivemeasure.net privacy.crwdcntrl.net sb.scorecardresearch.com securepubads.g.doubleclick.net t.effectivemeasure.net tags.crwdcntrl.net tpc.googlesyndication.com cdn.permutive.com tlx.3lift.com www.googletagservices.com ib.3lift.com static.files.bbci.co.uk; img-src 'self' c.files.bbci.co.uk data: https://a1.api.bbc.co.uk i.ytimg.com ichef.bbci.co.uk logws1363.ati-host.net news.bbcimg.co.uk news.files.bbci.co.uk newsimg.bbc.co.uk pbs.twimg.com ping.chartbeat.net platform.twitter.com r.bbci.co.uk sb.scorecardresearch.com syndication.twitter.com ton.twimg.com www.google-analytics.com collector.effectivemeasure.net csi.gstatic.com dt.adsafeprotected.com googleads.g.doubleclick.net pagead2.googlesyndication.com pixel.adsafeprotected.com px.moatads.com sb.scorecardresearch.com secure-au.imrworldwide.com secure-nz.imrworldwide.com secure-us.imrworldwide.com securepubads.g.doubleclick.net tpc.googlesyndication.com www.google.com widget-pixels.outbrain.com eb2.3lift.com secure-dcr-cert.imrworldwide.com static.files.bbci.co.uk; font-src gel.files.bbci.co.uk static.bbci.co.uk news.files.bbci.co.uk ws-downloads.files.bbci.co.uk; style-src cdn.riddle.com flo.uri.sh news.files.bbci.co.uk platform.twitter.com static.bbc.co.uk static.bbci.co.uk ton.twimg.com www.riddle.com 'unsafe-inline'; frame-src 'self' bbc001.carto.com bbc003.carto.com bbc-maps.carto.com cdn.riddle.com chartbeat.com emp.bbc.co.uk emp.bbc.com flo.uri.sh m.facebook.com news.files.bbci.co.uk personaltaxcalculator2.deloittecloud.co.uk platform.twitter.com public.flourish.studio static2.chartbeat.com syndication.twitter.com web.facebook.com www.bbc.co.uk www.facebook.com www.instagram.com www.ons.gov.uk www.riddle.com www.youtube.com *.safeframe.googlesyndication.com bcp.crwdcntrl.net edigitalsurvey.com tpc.googlesyndication.com widgets.outbrain.com eb2.3lift.com cdn-gl.imrworldwide.com; object-src 'none'; worker-src 'self' blob:; manifest-src static.files.bbci.co.uk; connect-src 'self' cookie-oven.api.bbc.co.uk cookie-oven.api.bbc.com ems.wearehearken.com https://a1.api.bbc.co.uk locator-service.api.bbci.co.uk logws1363.ati-host.net modules.wearehearken.com mybbc-analytics.files.bbci.co.uk news.files.bbci.co.uk static.files.bbci.co.uk platform.twitter.com search.api.bbci.co.uk search.api.bbci.com www.bbc.co.uk www.bbc.com www.google-analytics.com idcta.api.bbc.com collector.effectivemeasure.net csi.gstatic.com detect-survey.effectivemeasure.net experience.tinypass.com gn-flagpoles.test.api.bbci.co.uk gn-flagpoles.api.bbci.co.uk pagead2.googlesyndication.com securepubads.g.doubleclick.net static.files.bbci.co.uk static.test.files.bbci.co.uk survey.effectivemeasure.net www.bbc.co.uk www.live.bbc.co.uk tcheck.outbrainimg.com log.outbrainimg.com mcdp-nydc1.outbrain.com api.permutive.com secure-dcr-cert.imrworldwide.com https://europe-west1-bbc-otg-traf-mgr-bq-prod-4591.cloudfunctions.net; child-src blob:; base-uri 'none'; form-action 'self' platform.twitter.com syndication.twitter.com; frame-ancestors 'none'; upgrade-insecure-requests; feature-policy: accelerometer 'none'; autoplay 'none'; camera 'none'; document-domain 'self' https://emp.bbc.com https://emp.bbc.co.uk http://emp.bbc.com http://emp.bbc.co.uk; encrypted-media 'none'; fullscreen 'self'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture 'self' https://emp.bbc.com https://emp.bbc.co.uk http://emp.bbc.com http://emp.bbc.co.uk; screen-wake-lock 'none'; sync-xhr 'none'; usb 'none'; xr-spatial-tracking 'none' nel: {"report_to":"default","max_age":2592000,"include_subdomains":true,"failure_fraction":0.05} referrer-policy: strict-origin-when-cross-origin via: 1.1 BBC-GTM, 1.1 Belfrage, 1.1 varnish x-content-type-options: nosniff x-frame-options: DENY x-xss-protection: 1; mode=block X-Mrid: n1 report-to: {"group":"default","max_age":2592000,"endpoints":[{"url":"https://europe-west1-bbc-otg-traf-mgr-bq-prod-4591.cloudfunctions.net/report-endpoint","priority":1}],"include_subdomains":true} X-BBC-Edge-Cache-Status: MISS X-BBC-Origin-Response-Status: 200 Server: BBC-GTM Accept-Ranges: bytes Date: Wed, 17 Feb 2021 19:00:52 GMT Age: 0 X-LB-NoCache: true X-Fastly-Cache-Status: MISS-CLUSTER X-Served-By: cache-hhn4029-HHN X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1613588452.495611,VS0,VE55 Vary: x-bbc-edge-scheme,Accept-Encoding