| Server | Hiawatha |
| Connection | keep-alive |
| Expect-CT | max-age=31536000 |
| Referrer-Policy | strict-origin-when-cross-origin |
| Content-Security-Policy | default-src 'self'; style-src 'self' https://ajax.googleapis.com 'unsafe-inline'; script-src 'self' https://ajax.googleapis.com 'sha256-S6390gPiOVokgW0efzgSjOybX4SGUkwOII/OtnKah3U=' |
| X-Xss-Protection | 1; mode=block |
| X-Content-Type-Options | nosniff |
| X-Frame-Options | DENY |
| Public-Key-Pins | pin-sha256="onaCdjsKH0C4sHiXusOM9shiZicc9Al6MiLZTCO0qQo="; pin-sha256="8TwPJW93Pq3Bt8JCYqczigvHKrcqgzzIdsDxf3bY6i0="; pin-sha256="81qewLCsi/LvKwhvs4O/wkGdr65ek+W3m9cIHFn7wB4="; max-age=7776000; includeSubDomains |
| X-Random | SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS |
| Strict-Transport-Security | max-age=31536000; includeSubDomains; preload |
| Transfer-Encoding | chunked |
| Content-Encoding | gzip |
| Vary | Accept-Encoding |
| Content-type | text/html; charset=UTF-8 |