HTTP/1.1 200 OK
Date: Wed, 24 Feb 2021 06:45:31 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 6551
Connection: keep-alive
Content-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://give.communityfunded.com/ undefined/ https://maps.googleapis.com/ https://www.google-analytics.com/ https://js.intercomcdn.com/ https://widget.intercom.io/ https://core.spreedly.com/ https://connect.facebook.net/ 'unsafe-eval' http://* data: blob:;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ data: blob: *;font-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://fonts.gstatic.com/ data: blob:;frame-src 'self' 'unsafe-inline' https://give.communityfunded.com/ undefined/ https://core.spreedly.com/ https://www.facebook.com/ http://* data: blob: *;connect-src 'self' 'unsafe-inline' https://give-webhooks.communityfunded.com/graphql https://cognito-idp.us-west-2.amazonaws.com/ https://cognito-identity.us-west-2.amazonaws.com/ https://cf-frontend-media.s3.us-west-2.amazonaws.com/ https://api-js.mixpanel.com/ https://js.intercomcdn.com/ https://api-iam.intercom.io/ https://www.google-analytics.com/ https://www.facebook.com/ https://stats.g.doubleclick.net/ https://fonts.googleapis.com/ https://www.googleapis.com/ wss://nexus-websocket-a.intercom.io/ blob: data: gap: *;img-src 'self' 'unsafe-inline' https: data: blob: https://cf-frontend-media.s3.us-west-2.amazonaws.com/ https://www.google-analytics.com/ https://res.cloudinary.com/community-funded/;object-src 'self'
X-DNS-Prefetch-Control: off
Expect-CT: max-age=0
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer
X-XSS-Protection: 0
ETag: W/"1997-8BEVQBRxBpjDEzcLlynxxDDcZUo"
Vary: Accept-Encoding