Vary: Accept-Encoding Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff Content-Type: text/html; charset=UTF-8 Connection: keep-alive HTTP/1.1 200 OK X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000 Server: nginx Pragma: no-cache X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: -1 Date: Sun, 18 Mar 2018 14:58:25 GMT Transfer-Encoding: chunked Content-Security-Policy: upgrade-insecure-requests