| Server | Apache |
| X-XSS-Protection | 1; mode=block |
| Strict-Transport-Security | max-age=31536000; includeSubDomains |
| X-Frame-Options | SAMEORIGIN |
| X-Content-Type-Options | nosniff |
| Public-Key-Pins | pin-sha256="base64+primary=="; pin-sha256="base64+backup=="; max-age=5184000; includeSubDomains |
| Cache-Control | max-age=0 |
| Expires | Thu, 22 Feb 2018 03:04:42 GMT |
| Vary | Accept-Encoding |
| Content-Encoding | gzip |
| Content-Security-Policy | default-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://code.jquery.com/ https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://fonts.gstatic.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.paypalobjects.com https://www.paypal.com/ https://www.google-analytics.com https://s.canddi.io https://i.canddi.com https://cdns.canddi.com https://www.googletagmanager.com https://chimpstatic.com https://www.google.com https://www.gstatic.com; font-src 'self' 'unsafe-inline' data: https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com; img-src 'self' 'unsafe-inline' https://s.canddi.io https://www.google-analytics.com https://d3t0oesq8995hv.cloudfront.net https://woocommerce.com https://ps.w.org/ https://secure.gravatar.com data: https://s.w.org/ https://www.paypalobjects.com; frame-src *; connect-src 'self' https://www.paypal.com |
| Keep-Alive | timeout=5, max=100 |
| Connection | Keep-Alive |
| Content-Type | text/html; charset=UTF-8 |