HTTP/1.1 200 OK
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
Content-Length: 212
X-Iinfo: 10-47745715-0 0NNN RT(1645490840704 31) q(0 -1 -1 1) r(0 -1) B10(4,312,0) U5
Set-Cookie: visid_incap_1713355=fKy0QgYcSZGZtuvyBGIXC5gyFGIAAAAAQUIPAAAAAADuYStdEEUgiqkt17V2Ns1c; expires=Tue, 21 Feb 2023 16:08:34 GMT; HttpOnly; path=/; Domain=.bluecrossmnfoundation.org
Set-Cookie: incap_ses_620_1713355=BRm8ST5ajX3JKh+6Xq+aCJgyFGIAAAAAU3FUcraE/UQsidm+0JTj0w==; path=/; Domain=.bluecrossmnfoundation.org
Content-Security-Policy: default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: secure.gravatar.com dasfelynsaterr.webcam maps.google.com fonts.gstatic.com *.doubleclick.net ps.w.org s.w.org maps.gstatic.com www.youtube-nocookie.com *.list-manage.com i.ytimg.com www.bluecrossmnfoundation.org www.facebook.com code.jquery.com yoast.com ajax.googleapis.com rkiro.z6airr.com stats.g.doubleclick.net www.gstatic.com www.slant.co maps.googleapis.com syndication.twitter.com 2508t.dsp7c.com subwayblaze.com platform.twitter.com gtmetrix.com www.google.com connect.facebook.net www.googletagmanager.com www.youtube.com www.google-analytics.com analytify.io maxcdn.bootstrapcdn.com cdnjs.cloudflare.com fonts.googleapis.com bcbsmnfoundation.us7.list-manage.com
Content-Security-Policy-Report-Only: connect-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: www.google-analytics.com; font-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: maxcdn.bootstrapcdn.com; default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: ; form-action 'none' data: blob: ; report-uri /csp_report