Date: Thu, 29 Jun 2017 04:26:56 GMT Content-Type: text/html; charset=utf-8 X-XSS-Protection: 1; mode=block Content-Security-Policy-Report-Only: default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; report-uri /csp-report Connection: keep-alive Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Transfer-Encoding: chunked HTTP/1.1 200 OK Expires: Thu, 19 Nov 1981 08:52:00 GMT Server: nginx Strict-Transport-Security: max-age=31536000 Keep-Alive: timeout=5 X-Content-Type-Options: nosniff Pragma: no-cache Public-Key-Pins: pin-sha256="c/9Yz13SBgmunRzIp9ey73OlefByv9N02l4M1wE3GVY="; pin-sha256="c/9Yz13SBgmunRzIp9ey73OlefByv9N02l4M1wE3GVY="; max-age=5184000; includeSubDomains X-Frame-Options: DENY Set-Cookie: KADSESSID=d2q7u87b17oca5fnr70f42l646; path=/