HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: UrlRewriter.NET 2.0.0
Set-Cookie: ASP.NET_SessionId=0xs4flxrh4qr1ikt1iqikzyv; path=/; secure; HttpOnly
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'              ; img-src 'self' data:                *.fbcdn.net *.ytimg.com *.gstatic.com *.google.com *.placeholder.com *.googleapis.com *.google-analytics.com placehold.it                *.cdninstagram.com i.ytimg.com *.facebook.com *.doubleclick.net *.windows.net *.youtube.com *.zscalertwo.net                *.mailchimp.com                *.googletagmanager.com              ; style-src 'self' 'unsafe-inline'                *.googleapis.com                *.mailchimp.com              ; script-src 'self' 'unsafe-inline' 'unsafe-eval'                *.google.com *.googleapis.com *.google-analytics.com *.youtube.com *.ytimg.com *.instagram.com *.googletagmanager.com *.jquery.com *.gstatic.com                *.facebook.net *.twitter.com *.googleadservices.com *.doubleclick.net                              *.hirebridge.com *.zscalertwo.net                *.mailchimp.com *.cloudfront.net *.list-manage.com              ; font-src 'self' data:                *.gstatic.com              ; frame-src 'self'                *.youtube.com *.google.com *.twitter.com *.facebook.com *.doubleclick.net                 *.hirebridge.com *.zscalertwo.net              ; connect-src 'self' *.windows.net *.google.com *.google-analytics.com                             
Strict-Transport-Security: max-age=31536000
Referrer-Policy: strict-origin
Date: Sat, 25 May 2019 10:05:13 GMT
Content-Length: 50557