HTTP/1.1 200 OK
Date: Tue, 14 May 2019 01:34:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: STYXKEY_CLSES=l3ln7gmdvhsgg6uhl6t7m8fkc5; path=/; HttpOnly
Set-Cookie: promo=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
Set-Cookie: promo=93016; expires=Thu, 13-Jun-2019 01:34:27 GMT; Max-Age=2592000; path=/
Set-Cookie: historical_promo_code=93016; expires=Thu, 14-May-2020 01:34:27 GMT; Max-Age=31622400; path=/
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' *.amigoenergy.com *.typekit.net *.googletagmanager.com *.optimizely.com cdnjs.cloudflare.com www.gstatic.com *.googleapis.com *.google.com *.clear.link *.quantserve.com *.googleadservices.com *.google-analytics.com *.facebook.net *.trustedform.com *.liveperson.net *.callrail.com *.doubleclick.net *.quantcount.com *.turn.com *.clearlink.com *.mouseflow.com *.lpsnmedia.net *.facebook.com data: *.gstatic.com *.cloudfront.net *.pantheonsite.io *.newrelic.com *.smartadserver.com *.addtoany.com *.nr-data.net;
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Accept-Encoding
X-Frame-Options: sameorigin
Cache-Control: max-age=600, private, must-revalidate