sport-security: max-age=31536000
vary: Accept-Encoding
permissions-policy: browsing-topics=()
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
server: cloudflare
X-Firefox-Spdy: h2