HTTP/1.1 200 OK
Date: Tue, 26 Mar 2019 16:09:05 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d462da7107091340fe3ced13d03c159971553616545; expires=Wed, 25-Mar-20 16:09:05 GMT; path=/; domain=.haveibeenpwned.com; HttpOnly
Cache-Control: public, max-age=2314
Expires: Tue, 26 Mar 2019 16:16:19 GMT
Last-Modified: Tue, 26 Mar 2019 15:16:19 GMT
Vary: *, Accept-Encoding
X-Frame-Options: Deny
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'none';script-src 'self' 'nonce-HLItqMO4p9ZGbHtqCAiV' www.google-analytics.com www.google.com www.gstatic.com cdnjs.cloudflare.com az416426.vo.msecnd.net;style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com;img-src 'self' www.google-analytics.com stats.g.doubleclick.net www.gstatic.com;font-src 'self' cdnjs.cloudflare.com fonts.gstatic.com;connect-src 'self' api.pwnedpasswords.com api.haveibeenpwned.com www.google-analytics.com stats.g.doubleclick.net dc.services.visualstudio.com;base-uri 'self';child-src www.google.com;form-action 'self' accounts.google.com www.paypal.com;frame-ancestors 'none';upgrade-insecure-requests;report-uri https://troyhunt.report-uri.com/r/d/csp/enforce
Request-Context: appId=cid-v1:bcc569a3-d364-4306-8bbe-83e9fe4d020e
Access-Control-Expose-Headers: Request-Context
CF-Cache-Status: HIT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4bda631169d2ccd4-EWR
Content-Encoding: gzip