ss-origin
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 9d829ed79e0ce5d9-ZRH
X-Firefox-Spdy: h2