HTTP/1.1 200 OK
Date: Thu, 16 May 2019 21:44:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=de14672cc979cd271cd6189c68d1d8f461558043047; expires=Fri, 15-May-20 21:44:07 GMT; path=/; domain=.bench.ca; HttpOnly
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=he5njidp36lc5g11l5njtr4rp6; expires=Sat, 18-May-2019 21:44:08 GMT; Max-Age=172800; path=/; domain=bench.ca; secure; HttpOnly
Pragma: no-cache
Cache-Control: max-age=0, must-revalidate, no-cache, no-store
Expires: Wed, 16 May 2018 21:21:18 GMT
Content-Security-Policy: upgrade-insecure-requests
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-UA-Compatible: IE=Edge
Content-Security-Policy: default-src 'none'; object-src 'none'; media-src d10lpsik1i8c69.cloudfront.net; style-src * 'unsafe-inline'; img-src * data: blob:; font-src * data:; connect-src *; frame-src 'self' *.lightwidget.com *.referralcandy.com *.twitter.com cdnjs.cloudflare.com smct.co *.signifyd.com acdn.adnxs.com tags.tiqcdn.com s7.addthis.com bid.g.doubleclick.net *.vimeo.com www.facebook.com *.fls.doubleclick.net www.yahoo.com google.de couponfollow.com *.hola.org gsa://onpageload opera://js-inject connect.facebook.net assets.pinterest.com  www.googletagmanager.com tpc.googlesyndication.com *.paypal.com cj.dotomi.com *.givingassistant.org *.kaspersky-labs.com *.hotjar.com www.emjcd.com *.googleapis.com *.dotmailer-surveys.com *.youtube.com *.youtu.be;script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.newrelic.com *.nr-data.net *.lightwidget.com app.getwoohoo.com *.rewardstyle.com *.referralcandy.com cdn.syndication.twimg.com *.twitter.com d10lpsik1i8c69.cloudfront.net *.bing.com  cdnjs.cloudflare.com *.dotmailer-surveys.com *.bench.ca *.signifyd.com *.hotjar.com loadingpagesson.club *.kaspersky-labs.com *.opendns.com img.ucweb.com *.addthis.com m.addthisedge.com www.google.com www.google-analytics.com tpc.googlesyndication.com  www.googleadservices.com tagmanager.google.com www.googletagmanager.com www.gstatic.com googleads.g.doubleclick.net www.facebook.com connect.facebook.net www.paypalobjects.com www.paypal.com seal.thawte.com t.trackedlink.net secure.adnxs.com tags.tiqcdn.com chimpstatic.com ib.adnxs.com cdn.districtm.ca pixel.adacado.com assets.pinterest.com *.googleapis.com http://ajax.googleapis.com *.trackedlink.net smct.co; report-uri /csp-test.php;
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4d8087f87c487ae6-MCI