| Content-Type | text/html; charset=UTF-8 |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| Cache-control | no-store, no-cache, must-revalidate, no-transform, no-cache="set-cookie" |
| Content-Encoding | gzip |
| Content-Security-Policy | default-src 'self' google.com gstatic.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://ssl.google-analytics.com https://*.facebook.net https://*.linkedin.com; style-src 'self' 'unsafe-inline' https://google.com https://gstatic.com https://fonts.googleapis.com; img-src *; media-src *; frame-src 'self' https://meggalife.com https://meggaadportal.com https://meggamigo.com https://meggabuzz.com https://meggatac.com https://meggatomic.com https://meggaview.com https://meggamirage.com https://meggabiz.com https://www.google.com https://www.youtube.com https://*.facebook.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api.cognitive.microsoft.com |
| Expires | Thu, 19 Nov 1981 08:52:00 GMT |
| Pragma | no-cache |
| Server | nginx |
| Strict-Transport-Security | max-age=31536000; includeSubdomains |
| Vary | Accept-Encoding |
| X-Content-Security-Policy | default-src 'self' google.com gstatic.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://ssl.google-analytics.com https://*.facebook.net https://*.linkedin.com; style-src 'self' 'unsafe-inline' https://google.com https://gstatic.com https://fonts.googleapis.com; img-src *; media-src *; frame-src 'self' https://meggalife.com https://meggaadportal.com https://meggamigo.com https://meggabuzz.com https://meggatac.com https://meggatomic.com https://meggaview.com https://meggamirage.com https://meggabiz.com https://www.google.com https://www.youtube.com https://*.facebook.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api.cognitive.microsoft.com |
| X-Content-Type-Options | nosniff |
| X-Powered-By | PHP/7.0.27 |
| X-UA-Compatible | IE=Edge |
| X-WebKit-CSP | default-src 'self' google.com gstatic.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://ssl.google-analytics.com https://*.facebook.net https://*.linkedin.com; style-src 'self' 'unsafe-inline' https://google.com https://gstatic.com https://fonts.googleapis.com; img-src *; media-src *; frame-src 'self' https://meggalife.com https://meggaadportal.com https://meggamigo.com https://meggabuzz.com https://meggatac.com https://meggatomic.com https://meggaview.com https://meggamirage.com https://meggabiz.com https://www.google.com https://www.youtube.com https://*.facebook.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api.cognitive.microsoft.com |
| X-XSS-Protection | 1; mode=block |
| X-Cache | Miss from cloudfront |
| Via | 1.1 30aeb6ef25a393db74fabfc78bbd79e3.cloudfront.net (CloudFront) |
| X-Amz-Cf-Id | xoU5N8v4YE4vIGHFsltVI8_83kxEVsxhQqiogWeIlOO99wjHA288XQ== |