HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Apr 2021 08:26:25 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Cache-Control: public,max-age=604800
Set-Cookie: PHPSESSID=ea60c7f7cf29190be9a41d3c812c0201; path=/; secure; HttpOnly; SameSite=lax
Set-Cookie: PHPSESSID=ea60c7f7cf29190be9a41d3c812c0201; expires=Sat, 10-Apr-2021 08:50:25 GMT; Max-Age=1440; path=/; secure; HttpOnly
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Referrer-Policy: origin-when-cross-origin
X-Frame-Options: SAMEORIGIN
Permissions-Policy: geolocation=(), midi=(), camera=(), usb=(), magnetometer=(), accelerometer=(), vr=(), speaker=(), ambient-light-sensor=(), gyroscope=(), microphone=()
Feature-Policy: geolocation 'none'; midi 'none'; camera 'none'; usb 'none'; magnetometer 'none'; accelerometer 'none'; vr 'none'; speaker 'none'; ambient-light-sensor 'none'; gyroscope 'none'; microphone 'none'
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://kit.fontawesome.com https://analytics.promatur.com/ https://appleid.cdn-apple.com/ https://browser.sentry-cdn.com/ https://js.stripe.com *.sentry.io https://www.googletagmanager.com/ https://pagead2.googlesyndication.com/ https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.googleoptimize.com/optimize.js https://www.gstatic.com/recaptcha/ https://optimize.google.com maps.googleapis.com https://*.apple-mapkit.com https://www.google.com/recaptcha/api.js cdn.apple-mapkit.com; img-src 'self' blob: data: https://www.google-analytics.com/ http://analytics.promatur.com/ https://optimize.google.com https://image.prntscr.com maps.gstatic.com https://*.apple-mapkit.com *.googleapis.com developers.google.com; font-src 'self' https://ka-f.fontawesome.com data: https://fonts.googleapis.com/ https://fonts.gstatic.com; frame-ancestors 'none'; form-action 'self'; child-src 'self' blob: https://www.google.com/recaptcha/; object-src 'none'; style-src 'self' 'unsafe-inline' https://optimize.google.com https://fonts.googleapis.com; base-uri 'none'; connect-src 'self' https://ka-f.fontawesome.com https://analytics.promatur.com/ https://*.ingest.sentry.io/ https://sentry.io/api/embed/error-page/ https://*.apple-mapkit.com https://www.google-analytics.com/ https://sentry.io/api/; frame-src 'self' https://optimize.google.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ youtube.com https://js.stripe.com https://hooks.stripe.com https://www.google.com/recaptcha/api2/