HTTP/1.1 200 OK
Cache-Control: private,no-cache, no-store, must-revalidate
Pragma: no-cache
Content-Type: text/html; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Set-Cookie: secure-av=Secure; Secure
X-XSS-Protection: 1 ; mode= block; report = www.ashcompanies.com
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' https:; 
             script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http://*.google-analytics.com http://*.googleapis.com localhost:*; 
             font-src 'self' https: http://*.gstatic.com;
             img-src 'self' https: http://*.google-analytics.com http://*.gstatic.com http://*.googleapis.com;
             connect-src 'self' https: localhost:*;
             frame-src *;
             style-src 'self'  'unsafe-inline' https: http://*.googleapis.com;
             object-src https:;
             reflected-xss filter;
Referrer-Policy: no-referrer-when-downgrade
Date: Sat, 05 May 2018 17:11:57 GMT
Connection: close
Content-Length: 21219
Set-Cookie: TS0151d60a=0168539fa2eb8123de28407bbf7fe384f339f21995c915e71644950e7fb575e2576627f181b99bc6604e041e2fa705f7081fde513c; Path=/