Expires: Thu, 19 Nov 1981 08:52:00 GMT X-XSS-Protection: 1; mode=block Transfer-Encoding: chunked Set-Cookie: language=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.trust.zone CF-RAY: 34eb744429da2666-FRA Pragma: no-cache Strict-Transport-Security: max-age=2592000 X-Content-Security-Policy: default-src 'self'; child-src *.facebook.com platform.twitter.com static.siteheart.com *.g.doubleclick.net *.google.com *.google.fr; frame-src *.facebook.com platform.twitter.com *.siteheart.com *.g.doubleclick.net *.youtube.com *.google.com *.google.fr; connect-src 'self' *:888 wss://client.siteheart.com; font-src 'self' data:; form-action 'self' store.payproglobal.com secure.avangate.com *.siteheart.com; frame-ancestors 'self'; img-src 'self' data: *.google.com *.google.fr *.g.doubleclick.net *.facebook.com syndication.twitter.com seal.digicert.com www.google-analytics.com *.siteheart.com extraimage.net; media-src 'self' static.siteheart.com; object-src 'none'; style-src 'self' 'unsafe-inline' static.siteheart.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' google.com a.trust.zone platform.twitter.com connect.facebook.net www.gstatic.com www.googleadservices.com *.google-analytics.com seal.digicert.com *.siteheart.com; report-uri https://trust.zone/_csp_log X-Content-Type-Options: nosniff Content-Type: text/html; charset=UTF-8 Set-Cookie: __cfduid=dc916df9139398bf37bddec4b202be2461492055352; expires=Fri, 13-Apr-18 03:49:12 GMT; path=/; domain=.trust.zone; HttpOnly Server: cloudflare-nginx Connection: keep-alive HTTP/1.1 200 OK Date: Thu, 13 Apr 2017 03:49:13 GMT Vary: Accept-Encoding Content-Security-Policy: default-src 'self'; child-src *.facebook.com platform.twitter.com static.siteheart.com *.g.doubleclick.net *.google.com *.google.fr; frame-src *.facebook.com platform.twitter.com *.siteheart.com *.g.doubleclick.net *.youtube.com *.google.com *.google.fr; connect-src 'self' *:888 wss://client.siteheart.com; font-src 'self' data:; form-action 'self' store.payproglobal.com secure.avangate.com *.siteheart.com; frame-ancestors 'self'; img-src 'self' data: *.google.com *.google.fr *.g.doubleclick.net *.facebook.com syndication.twitter.com seal.digicert.com www.google-analytics.com *.siteheart.com extraimage.net; media-src 'self' static.siteheart.com; object-src 'none'; style-src 'self' 'unsafe-inline' static.siteheart.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' google.com a.trust.zone platform.twitter.com connect.facebook.net www.gstatic.com www.googleadservices.com *.google-analytics.com seal.digicert.com *.siteheart.com; report-uri https://trust.zone/_csp_log X-Frame-Options: DENY X-WebKit-CSP: default-src 'self'; child-src *.facebook.com platform.twitter.com static.siteheart.com *.g.doubleclick.net *.google.com *.google.fr; frame-src *.facebook.com platform.twitter.com *.siteheart.com *.g.doubleclick.net *.youtube.com *.google.com *.google.fr; connect-src 'self' *:888 wss://client.siteheart.com; font-src 'self' data:; form-action 'self' store.payproglobal.com secure.avangate.com *.siteheart.com; frame-ancestors 'self'; img-src 'self' data: *.google.com *.google.fr *.g.doubleclick.net *.facebook.com syndication.twitter.com seal.digicert.com www.google-analytics.com *.siteheart.com extraimage.net; media-src 'self' static.siteheart.com; object-src 'none'; style-src 'self' 'unsafe-inline' static.siteheart.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' google.com a.trust.zone platform.twitter.com connect.facebook.net www.gstatic.com www.googleadservices.com *.google-analytics.com seal.digicert.com *.siteheart.com; report-uri https://trust.zone/_csp_log Set-Cookie: TrustZoneSession=jr56r8ue2q09v5cfu5ig5uu1r2; path=/; domain=.trust.zone Set-Cookie: test=1; expires=Fri, 14-Apr-2017 03:50:12 GMT; Max-Age=86400; path=/; domain=.trust.zone Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0