| Content-Type | text/html; charset=UTF-8 |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| Keep-Alive | timeout=15 |
| Cache-Control | private, no-cache, no-store, proxy-revalidate, no-transform |
| pragma | no-cache |
| expires | -1 |
| Vary | Accept-Encoding, Accept-Encoding,User-Agent |
| Access-Control-Allow-Origin | * |
| Front-End-Https | on |
| Strict-Transport-Security | max-age=31536000; includeSubdomains; |
| X-Frame-Options | SAMEORIGIN, SAMEORIGIN, SAMEORIGIN |
| X-Content-Type-Options | nosniff |
| X-XSS-Protection | 1; mode=block |
| X-Permitted-Cross-Domain-Policies | master-only |
| Content-Encoding | gzip |