| Content-Type | text/html; charset=utf-8 |
| Connection | keep-alive |
| ETag | "1424bdea55fba090bb4ff6ef0e372b261d5cf891" |
| Vary | Accept-Language,Cookie,Accept-Encoding |
| Expires | Fri, 28 Dec 2018 18:20:06 GMT |
| Cache-Control | max-age=7200 |
| X-Frame-Options | DENY |
| Content-Encoding | gzip |
| X-XSS-Protection | 1; mode=block |
| X-Content-Type-Options | nosniff |
| Content-Security-Policy | default-src 'self'; img-src 'self' blob: data: *.mvp-stars.com *.twimg.com *.googleusercontent.com maps.googleapis.com secure.gravatar.com www.google-analytics.com www.facebook.com *.fbcdn.net p.typekit.net *.crisp.im cdn.branch.io; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net fonts.googleapis.com http://use.typekit.net https://use.typekit.net *.crisp.im; font-src 'self' data: fonts.typekit.net use.typekit.net fonts.gstatic.com fonts.googleapis.com cdn.jsdelivr.net *.crisp.im; script-src 'self' 'unsafe-inline' data: cdn.jsdelivr.net http://use.typekit.net https://use.typekit.net clef.io www.google-analytics.com connect.facebook.net *.crisp.im app.link cdn.branch.io/branch-latest.min.js api.branch.io; connect-src 'self' twitter.com *.crisp.im wss://*.crisp.im api.branch.io; frame-src clef.io; child-src clef.io |
| X-Permitted-Cross-Domain-Policies | master-only |
| Strict-Transport-Security | max-age=63072000; includeSubDomains; preload |