Ellenmedical.com

Date: Tue, 24 Feb 2026 01:13:12 GMT
Server: Apache
X-Redirect-By: WordPress
Strict-Transport-Security: max-age=15552000; includeSubDomains
Content-Security-Policy:  default-src 'self' ; 
Vary: Accept-Encoding
Location: https://www.ellenmedical.com/
X-Frame-Options: SAMEORIGIN
Referrer-Policy: no-referrer-when-downgrade
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Set-Cookie: cookiesession1=678A3E7191EE19BBCA53FD58D9A42322;Expires=Wed, 24 Feb 2027 01:13:12 GMT;Path=/;Secure;HttpOnly
X-Content-Type-Options: nosniff

HTTP/1.1 200 OK
Date: Tue, 24 Feb 2026 01:13:13 GMT
Server: Apache
Content-Security-Policy-Report-Only: base-uri 'self'; child-src 'self'; connect-src 'self'; default-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'self'; img-src 'self'; manifest-src 'self'; media-src 'self'; navigate-to 'self'; object-src 'none'; script-src 'self'; script-src-attr 'self'; script-src-elem 'self'; style-src 'self'; style-src-attr 'self'; style-src-elem 'self'; worker-src 'self'
Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com"), private-state-token-issuance=(self "https://www.google.com" "https://www.gstatic.com" "https://recaptcha.net" "https://challenges.cloudflare.com" "https://hcaptcha.com")
Link: <https://www.ellenmedical.com/wp-json/>; rel="https://api.w.org/", <https://www.ellenmedical.com/wp-json/wp/v2/pages/32>; rel="alternate"; title="JSON"; type="application/json", <https://www.ellenmedical.com/>; rel=shortlink
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=15552000; includeSubDomains
Last-Modified: Tue, 24 Feb 2026 01:13:14 GMT
ETag: "24af8f4af8ec13d3268e601586c7159f"
X-Frame-Options: SAMEORIGIN
Content-Security-Policy:  default-src 'self';  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://*.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.facebook.net https://analytics.tgi.cloud; worker-src 'self' 'unsafe-inline' 'unsafe-eval' blob:  https://*.googleapis.com https://*.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.facebook.net https://analytics.tgi.cloud; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.youtube.com  https://*.googleapis.com https://*.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.facebook.net https://analytics.tgi.cloud https://www.google.com; style-src  'self' 'unsafe-inline' https://fonts.googleapis.com https://*.googleapis.com;  img-src    'self' data: https://*.gravatar.com https://*.google-analytics.com https://*.facebook.com;  font-src   'self' https://fonts.gstatic.com https://*.googleapis.com;  connect-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://analytics.tgi.cloud; frame-src  'self' https://www.youtube.com https://player.vimeo.com https://www.facebook.com https://www.google.com https://www.gstatic.com; object-src 'none'; base-uri   'self'; form-action 'self';  frame-ancestors 'self';  upgrade-insecure-requests; 
Referrer-Policy: no-referrer-when-downgrade
Content-Type: text/html; charset=UTF-8
Set-Cookie: cookiesession1=678A3E7104C191E441B2F42BD4F84D90;Expires=Wed, 24 Feb 2027 01:13:14 GMT;Path=/;Secure;HttpOnly
X-Content-Type-Options: nosniff
Content-Length: 18335