HTTP/1.1 200 OK
Server: nginx/1.13.7
Date: Sun, 12 May 2019 21:45:31 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Vary: Accept-Encoding
Cache-Control: no-cache, no-store
Pragma: no-cache
Set-Cookie: .AspNetCore.Antiforgery.e1poAmuYPyg=CfDJ8IcMrROZREhAg03jgaO1sLK6n7r5czmkMVlvuUkbyEPECYxeNrgTDAOnHsC2jX26jArEi9N9a37NX1c0KApZz5OUmboYYQHEybeM_-fcYPXqo8nDZJ0EYgzQrD--Mz3ff9v3KOC9hGz2JZFeIx76zvg; path=/; samesite=strict; httponly
Request-Context: appId=cid-v1:dcfa9e22-fd30-419e-96d6-41b4ea6c8de4
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SameOrigin
Content-Security-Policy: default-src 'self' *.activityfan.com https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' ipinfo.io af-cdn-v-www.azureedge.net *.inspectlet.com https://js.stripe.com platform.twitter.com https:;style-src 'unsafe-inline' *;img-src * data: android-webview-video-poster:*;frame-src 'self' https: https://www.paypal.com https://js.stripe.com player.vimeo.com;font-src * data:;connect-src 'self' https://api.stripe.com https://*.paypal.com https://www.facebook.com https://www.google-analytics.com *.inspectlet.com mc.yandex.ru wss://ws.inspectlet.com dc.services.visualstudio.com;child-src 'self' https: https://www.paypal.com https://js.stripe.com player.vimeo.com;form-action 'self' *.activityfan.com https:;report-uri /tracking/csp-report https://1e8cb7cc59df2946272fc54c7d91d1cc.report-uri.io/r/default/csp/enforce
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
Access-Control-Expose-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
Strict-Transport-Security: max-age=15724800; includeSubDomains;