HTTP/1.1 200 OK
Date: Tue, 22 Feb 2022 04:23:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Pingback: https://www.bflnyc.org/core/xmlrpc.php
Link: <https://www.bflnyc.org/>; rel=shortlink
Access-Control-Allow-Origin: *
Content-Security-Policy: default-src * data: blob: 'self';script-src *.bflnyc.org *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.facebook.com *.facebook.net *.cloudflareinsights.com *.vimeo.com vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net *.optimizely.com *.cdn.optimizely.com *.cdn-pci.optimizely.com cdn-assets-prod.s3.amazonaws.com *.hotjar.com *.hotjar.io wss://*.hotjar.com doubleclick.net *.doubleclick.net stats.g.doubleclick.net youtube.com *.youtube.com www.youtube-nocookie.com *.youtube-nocookie.com *.disquscdn.com disqus.com *.disqus.com platform.twitter.com *.addthis.com *.resourceconnect.com *.googleadservices.com *.addthisedge.com *.moatads.com *.pinterest.com s3-us-west-2.amazonaws.com crm.bloomerang.co ajax.aspnetcdn.com api.bloomerang.co js.stripe.com core.spreedly.com givebutter.com *.givebutter.com *.twimg.com cdn.syndication.twimg.com *.twitter.com userway.org cnd.userway.org *.userway.org *.coadesign.org 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.bflnyc.org *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.facebook.com *.facebook.net *.cloudflareinsights.com *.vimeo.com vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net *.optimizely.com *.cdn.optimizely.com *.cdn-pci.optimizely.com cdn-assets-prod.s3.amazonaws.com *.hotjar.com *.hotjar.io wss://*.hotjar.com doubleclick.net *.doubleclick.net stats.g.doubleclick.net youtube.com *.youtube.com www.youtube-nocookie.com *.youtube-nocookie.com *.disquscdn.com disqus.com *.disqus.com platform.twitter.com *.addthis.com *.resourceconnect.com *.googleadservices.com *.addthisedge.com *.moatads.com *.pinterest.com s3-us-west-2.amazonaws.com crm.bloomerang.co ajax.aspnetcdn.com api.bloomerang.co js.stripe.com core.spreedly.com givebutter.com *.givebutter.com *.twimg.com cdn.syndication.twimg.com *.twitter.com userway.org cnd.userway.org *.userway.org *.coadesign.org 'unsafe-inline' 'unsafe-eval' blob: data: 'self';font-src *.bflnyc.org *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.facebook.com *.facebook.net *.cloudflareinsights.com *.vimeo.com vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net *.optimizely.com *.cdn.optimizely.com *.cdn-pci.optimizely.com cdn-assets-prod.s3.amazonaws.com *.hotjar.com *.hotjar.io wss://*.hotjar.com doubleclick.net *.doubleclick.net stats.g.doubleclick.net youtube.com *.youtube.com www.youtube-nocookie.com *.youtube-nocookie.com *.disquscdn.com disqus.com *.disqus.com platform.twitter.com *.addthis.com *.resourceconnect.com *.googleadservices.com *.addthisedge.com *.moatads.com *.pinterest.com s3-us-west-2.amazonaws.com crm.bloomerang.co ajax.aspnetcdn.com api.bloomerang.co js.stripe.com core.spreedly.com givebutter.com *.givebutter.com *.twimg.com cdn.syndication.twimg.com *.twitter.com userway.org cnd.userway.org *.userway.org *.coadesign.org 'unsafe-inline' 'unsafe-eval' blob: data: 'self';img-src *.bflnyc.org *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.facebook.com *.facebook.net *.cloudflareinsights.com *.vimeo.com vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net *.optimizely.com *.cdn.optimizely.com *.cdn-pci.optimizely.com cdn-assets-prod.s3.amazonaws.com *.hotjar.com *.hotjar.io wss://*.hotjar.com doubleclick.net *.doubleclick.net stats.g.doubleclick.net youtube.com *.youtube.com www.youtube-nocookie.com *.youtube-nocookie.com *.disquscdn.com disqus.com *.disqus.com platform.twitter.com *.addthis.com *.resourceconnect.com *.googleadservices.com *.addthisedge.com *.moatads.com *.pinterest.com s3-us-west-2.amazonaws.com crm.bloomerang.co ajax.aspnetcdn.com api.bloomerang.co js.stripe.com core.spreedly.com givebutter.com *.givebutter.com *.twimg.com cdn.syndication.twimg.com *.twitter.com userway.org cnd.userway.org *.userway.org *.coadesign.org 'unsafe-inline' 'unsafe-eval' blob: data: 'self' *;connect-src *.bflnyc.org *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.facebook.com *.facebook.net *.cloudflareinsights.com *.vimeo.com vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net *.optimizely.com *.cdn.optimizely.com *.cdn-pci.optimizely.com cdn-assets-prod.s3.amazonaws.com *.hotjar.com *.hotjar.io wss://*.hotjar.com doubleclick.net *.doubleclick.net stats.g.doubleclick.net youtube.com *.youtube.com www.youtube-nocookie.com *.youtube-nocookie.com *.disquscdn.com disqus.com *.disqus.com platform.twitter.com *.addthis.com *.resourceconnect.com *.googleadservices.com *.addthisedge.com *.moatads.com *.pinterest.com s3-us-west-2.amazonaws.com crm.bloomerang.co ajax.aspnetcdn.com api.bloomerang.co js.stripe.com core.spreedly.com givebutter.com *.givebutter.com *.twimg.com cdn.syndication.twimg.com *.twitter.com userway.org cnd.userway.org *.userway.org *.coadesign.org 'unsafe-inline' 'unsafe-eval' blob: data: 'self';frame-src *.bflnyc.org *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.facebook.com *.facebook.net *.cloudflareinsights.com *.vimeo.com vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net *.optimizely.com *.cdn.optimizely.com *.cdn-pci.optimizely.com cdn-assets-prod.s3.amazonaws.com *.hotjar.com *.hotjar.io wss://*.hotjar.com doubleclick.net *.doubleclick.net stats.g.doubleclick.net youtube.com *.youtube.com www.youtube-nocookie.com *.youtube-nocookie.com *.disquscdn.com disqus.com *.disqus.com platform.twitter.com *.addthis.com *.resourceconnect.com *.googleadservices.com *.addthisedge.com *.moatads.com *.pinterest.com s3-us-west-2.amazonaws.com crm.bloomerang.co ajax.aspnetcdn.com api.bloomerang.co js.stripe.com core.spreedly.com givebutter.com *.givebutter.com *.twimg.com cdn.syndication.twimg.com *.twitter.com userway.org cnd.userway.org *.userway.org *.coadesign.org 'unsafe-inline' 'unsafe-eval' blob: data: 'self';object-src *.ivywise.com *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.googletagmanager.com *.facebook.com *.facebook.net *.cloudflareinsights.com *.vimeo.com vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net *.optimizely.com *.cdn.optimizely.com *.cdn-pci.optimizely.com cdn-assets-prod.s3.amazonaws.com *.hotjar.com *.hotjar.io wss://*.hotjar.com doubleclick.net *.doubleclick.net stats.g.doubleclick.net youtube.com *.youtube.com www.youtube-nocookie.com *.youtube-nocookie.com *.disquscdn.com disqus.com *.disqus.com platform.twitter.com *.addthis.com *.resourceconnect.com *.googleadservices.com *.addthisedge.com *.moatads.com *.pinterest.com s3-us-west-2.amazonaws.com crm.bloomerang.co ajax.aspnetcdn.com api.bloomerang.co js.stripe.com core.spreedly.com givebutter.com *.givebutter.com *.twimg.com cdn.syndication.twimg.com *.twitter.com userway.org cnd.userway.org *.userway.org *.coadesign.org 'unsafe-inline' 'unsafe-eval' blob: data: 'self'
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
CF-Cache-Status: DYNAMIC
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RP%2FGJ91QZTL5FWCEWbXnFcmeI9XIvXXLo5rHBgv5qZXvDnxpGdOxJQGWdHJU8vyQoLwq5vmx2kxEMCxa372M9HQRz%2Bvnv0bCZdPgvNbaco0%2FIO3hUPFy%2FfPpylTE78LZYg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 6e15709ea8768127-ORD
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400