HTTP/1.1 200 OK
Date: Mon, 12 Aug 2019 23:28:14 GMT
Server: Apache
Strict-Transport-Security: max-age=31589346; includeSubDomains; preload
Referrer-Policy: strict-origin-when-cross-origin
Accept-Ranges: bytes
Cache-Control: max-age=3600
Expires: Tue, 13 Aug 2019 00:28:14 GMT
Vary: Accept-Encoding
Content-Security-Policy: default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com https://www.google-analytics.com; connect-src 'self' https://www.google-analytics.com; img-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; object-src 'self'; frame-src 'self' https://www.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://www.paypal.com; block-all-mixed-content; report-uri https://alpca.report-uri.com/r/d/csp/enforce;
Expect-CT: max-age=0, report-uri="https://alpca.report-uri.com/r/d/ct/reportOnly"
Feature-Policy: accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'none'; camera 'none'; encrypted-media 'none'; fullscreen 'self'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture 'none'; speaker 'self'; sync-xhr 'none'; usb 'none'; vr 'none'
NEL: {"report_to":"default","max_age":3600,"include_subdomains":true,"failure_fraction":0.05}
Report-To: {"group":"default","max_age":3600,"endpoints":[{"url":"https://alpca.report-uri.com/a/d/g"}],"include_subdomains":true}
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block; report=https://alpca.report-uri.com/r/d/xss/enforce
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8