| Cache-Control | private |
| Content-Type | text/html; charset=utf-8 |
| Content-Encoding | gzip |
| Vary | Accept-Encoding |
| Server | Microsoft-IIS/8.0 |
| Strict-Transport-Security | max-age=31536000; includeSubdomains; preload |
| Public-Key-Pins | max-age=300;pin-sha256="abbgvuZ83LqwWMGCGoe5R49HfoHWdskS0Az3ajc5n/s=";pin-sha256="7UL+ANGL8fTsSVUvnI3/tAEoMUKLCiMdRrUDJqyvMbs=";report-uri="https://report-uri.io/report/haveibeenpwned" |
| X-Frame-Options | Deny |
| X-Content-Type-Options | nosniff |
| X-XSS-Protection | 1; mode=block |
| Content-Security-Policy | default-src 'self' https://rpm.newrelic.com https://www.google.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://apis.google.com https://www.google-analytics.com https://cdnjs.cloudflare.com https://js-agent.newrelic.com https://bam.nr-data.net;object-src 'none';style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com;img-src 'self' https://az594751.vo.msecnd.net https://www.google.com https://www.google-analytics.com https://ssl.gstatic.com;media-src 'none';font-src 'self' https://cdnjs.cloudflare.com;child-src https://rpm.newrelic.com https://www.google.com;frame-ancestors 'none';report-uri https://report-uri.io/report/haveibeenpwned |
| Arr-Disable-Session-Affinity | True |