HTTP/1.1 200 OK
Server: nginx/1.14.2
Date: Thu, 11 Jun 2020 13:33:39 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 50943
Connection: keep-alive
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Vary: Accept-Encoding,Cookie
Last-Modified: Thu, 11 Jun 2020 13:09:46 GMT
ETag: "c6ff-5a7ceacb89213"
Accept-Ranges: bytes
Cache-Control: max-age=3, must-revalidate
Expires: Thu, 11 Jun 2020 13:33:42 GMT
Content-Security-Policy: default-src 'self'; connect-src 'self' https://www.google-analytics.com https://hcaptcha.com https://*.hcaptcha.com; font-src 'self' data: https://fonts.gstatic.com; form-action 'self'; frame-ancestors 'self'; frame-src https://hcaptcha.com https://*.hcaptcha.com https://www.youtube.com https://www.google.com https://player.vimeo.com https://www.mixcloud.com; img-src 'self' https: data: https://secure.gravatar.com https://www.google-analytics.com; manifest-src 'none'; media-src 'self'; object-src 'none'; prefetch-src 'self'; script-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com https://use.fontawesome.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com ajax.googleapis.com apis.google.com; style-src 'self' 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com; report-uri https://mozillacz.report-uri.com/r/d/csp/enforce; upgrade-insecure-requests
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: strict-origin-when-cross-origin