stimuluz.biz

Http-Version: 1.1
Status-Code: 200
Status: 200 OK
Date: Thu, 24 Oct 2019 17:34:04 GMT
Server: Apache/2.4.41 (cPanel) OpenSSL/1.0.2t mod_bwlimited/1.4 Phusion_Passenger/5.3.7
X-Powered-By: PHP/7.2.23
Cache-Control: no-cache, private
X-Frame-Options: sameorigin
Content-Security-Policy: default-src 'self'; base-uri 'none'; connect-src 'self' https://*.pusher.com wss://*.pusher.com wss://*.pusherapp.com https://*.cloudflare.com wss://*.relay.crisp.chat https://*.crisp.chat https://*.filestackapi.com https://s3.amazonaws.com https://*.gitbench.com https://*.stripe.com https://*.workice.com https://*.paypal.com https://*.braintree-api.com https://*.braintreegateway.com https://*.google-analytics.com https://*.tawk.to wss://*.tawk.to; font-src 'self' https://fonts.gstatic.com http://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://*.crisp.chat https://static-v.tawk.to data:; form-action 'self' https://*.twitter.com https://*.paypal.com https://*.mollie.com https://va.tawk.to; frame-ancestors 'none'; frame-src https://*.stripe.com https://*.twitter.com https://onesignal.com https://*.paypal.com https://*.razorpay.com https://*.braintreegateway.com https://*.driftt.com https://va.tawk.to https://*.google.com https://*.codecanyon.net http://*.youtube.com; img-src 'self' * data:; media-src 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://code.jquery.com https://www.googletagmanager.com https://www.google-analytics.com https://*.pusher.com https://cdnjs.cloudflare.com http://cdnjs.cloudflare.com https://www.gstatic.com https://cdn.jsdelivr.net https://static.filestackapi.com https://unpkg.com https://*.stripe.com https://use.fontawesome.com/ https://*.newrelic.com https://bam.nr-data.net https://*.crisp.chat https://cdn.datatables.net https://platform.twitter.com https://*.onesignal.com https://onesignal.com https://*.paypalobjects.com https://*.paypal.com https://*.2checkout.com https://*.razorpay.com https://*.braintreegateway.com https://*.driftt.com https://embed.tawk.to https://*.google.com https://*.googleadservices.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com http://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://www.gstatic.com https://cdn.datatables.net https://cdn.jsdelivr.net/ https://static.filestackapi.com https://*.crisp.chat https://onesignal.com https://*.stripe.com https://*.braintreegateway.com; worker-src blob:
Feature-Policy: accelerometer 'self'; ambient-light-sensor 'self'; autoplay 'self'; camera 'self'; display-capture 'self'; document-domain *; encrypted-media 'self'; fullscreen 'self'; geolocation 'self'; gyroscope 'self'; magnetometer 'self'; microphone 'self'; midi 'self'; payment 'self'; picture-in-picture *; speaker 'self'; sync-xhr *; usb 'self'; vr 'self'
Strict-Transport-Security: max-age=63072000; includeSubdomains;
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 1; mode=block
Referrer-Policy: no-referrer-when-downgrade
Content-Encoding: gzip
Vary: Accept-Encoding
Upgrade: h2,h2c
Connection: Upgrade, close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8