| Server | Apache |
| X-Content-Type-Options | nosniff |
| Strict-Transport-Security | max-age=31536000; includeSubDomains |
| Expires | Thu, 19 Nov 1981 08:52:00 GMT |
| Cache-Control | no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-transform |
| Pragma | no-cache |
| X-Frame-Options | DENY |
| X-XSS-Protection | 1; mode=block |
| Public-Key-Pins | pin-sha256="MxW6dL+4XSRCAZfS5zTi03WsINJyyQzbFM9pqj8jhnE="; pin-sha256="V388hqPlMW4ux5amyl2UGs6Q85LJ14UQYe7ybUW56Ho="; pin-sha256="Pa1iHCZ4y3irDhoowdJJJTHEwZn/NtK0iv8HWH6Wia8="; max-age=2592000; includeSubDomains; report-uri="https://report-uri.io/report/fbba29860d4ece730e237f53c15c8c0a" |
| Content-Security-Policy | default-src 'none'; connect-src 'self'; form-action 'self'; style-src 'self'; font-src 'self'; script-src 'self' https://www.google-analytics.com; img-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net data:; frame-src https://www.youtube.com; frame-ancestors 'none'; reflected-xss block; report-uri https://report-uri.io/report/fbba29860d4ece730e237f53c15c8c0a |
| Vary | Accept-Encoding |
| Content-Encoding | gzip |
| Keep-Alive | timeout=5, max=100 |
| Connection | Keep-Alive |
| Content-Type | text/html; charset=UTF-8 |