X-XSS-Protection: 1; mode=block Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://www.google-analytics.com/analytics.js http://www.google-analytics.com/ga.js http://connect.facebook.net/en_US/all.js https://www.facebook.com/ http://staticxx.facebook.com/ http://platform.twitter.com/widgets.js https://platform.twitter.com/ https://apis.google.com/; style-src 'self' 'unsafe-inline' http://fonts.googleapis.com/; img-src 'self' http://www.google-analytics.com/ https://www.facebook.com/ https://syndication.twitter.com/; font-src 'self' http://fonts.gstatic.com/; frame-src 'self' https://apis.google.com/ https://accounts.google.com/ http://maps.google.com/maps https://www.google.com/maps/ https://www.facebook.com/ http://staticxx.facebook.com/ https://staticxx.facebook.com/ http://platform.twitter.com/; Cache-Control: private, no-store X-Powered-By-Plesk: PleskWin HTTP/1.1 200 OK X-Content-Type-Options: nosniff Content-Type: text/html; charset=utf-8 Content-Length: 53298 Date: Sat, 02 Dec 2017 19:08:46 GMT X-Frame-Options: SAMEORIGIN