| Server | Apache |
| Strict-Transport-Security | max-age=16070400; includeSubDomains |
| Cache-Control | no-cache, max-age=0 |
| Expires | Mon, 02 Nov 2015 03:51:35 GMT |
| X-Frame-Options | DENY |
| Content-Security-Policy | default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.dropbox.com js.live.net https://facebook.com connect.facebook.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://www.google.com https://apis.google.com www.google-analytics.com ssl.google-analytics.com ajax.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.s3-eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://api.userlike.com; frame-src 'self' *.facebook.com https://apis.google.com https://accounts.google.com https://docs.google.com https://plusone.google.com https://www.google.com; object-src 'self' http://flashfox.googlecode.com https://*.fax.de blob:; font-src 'self' maxcdn.bootstrapcdn.com https://fonts.gstatic.com data:; img-src 'self' data: www.fax.de https://www.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://apis.google.com https://developer.android.com https://linkmaker.itunes.apple.com ssl.gstatic.com csi.gstatic.com https://www.paypal.com https://www.paypalobjects.com https://track.userlike.com https://userlike-cdn-client.s3-eu-west-1.amazonaws.com https://userlike-cdn-operators.s3-eu-west-1.amazonaws.com; style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com https://fonts.googleapis.com; connect-src 'self' https://www.userlike.com; |
| X-Content-Type-Options | nosniff |
| X-XSS-Protection | 1; mode=block |
| Vary | Accept-Encoding |
| Content-Encoding | gzip |
| Keep-Alive | timeout=3, max=5 |
| Connection | Keep-Alive |
| Content-Type | text/html; charset=UTF-8 |