HTTP/1.1 200 OK
Server: Apache
Strict-Transport-Security: max-age=31536000; includeSubDomains
Public-Key-Pins: pin-sha256="1rrt2UYzEMddYLy7QJBwHgvsBnRefzGG4CeTKwpCtfQ="; max-age=10; includeSubDomains
Cache-Control: no-cache,max-age=0,must-revalidate,no-store
Expires: Fri, 07 Jun 2019 14:17:03 GMT
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src http://*.harrietcarter.com https://*.harrietcarter.com https://*.newharriet.com 'unsafe-inline' 'unsafe-eval' data: blob: *.2mdn.net *.bizrate.com *.bizrateinsights.com *.brightcove.com *.brightcove.net *.coremetrics.com *.doubleclick.net *.facebook.com *.facebook.net *.fonts.net *.googleadservices.com *.google-analytics.com *.googleapis.com *.google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hawksearch.com *.hawksearch.info *.hawksearch.net *.mcafeesecure.com *.monetate.net *.moovweb.net *.offeredby.net *.powerreviews.com *.ywxi.net *.2mdn.net *.newbenefits.com *.anthonyrichards.com *.passtohealth.com *.cloudfront.net *.zencdn.net *.cloudinary.com *.iesnare.com *.cmcore.com *.paymentech.com *.kaptcha.com chat.amerimark.com *.hotjar.com *.linksynergy.com *.rakuten.com *.bing.com *.akstat.io *.googletagservices.com
X-Content-Type-Options: nosniff
Origin: https://www.harrietcarter.com
Access-Control-Allow-Origin: http://www.harrietcarter.com
X-DNS-Prefetch-Control: on
Content-Type: text/html; charset=utf-8
Vary: accept
Vary: user-agent
Date: Fri, 07 Jun 2019 14:17:03 GMT
Transfer-Encoding:  chunked
Connection: keep-alive
Connection: Transfer-Encoding
Set-Cookie: safeSessionID=nfdblcFkbldEiclj5120; Path=/; Domain=www.harrietcarter.com; Secure; HttpOnly
Set-Cookie: valuedGuest=Yes%7C578533rbdjppjnwczcEczj; Expires=Sat, 06-Jun-2020 14:17:03 GMT; Path=/; Domain=www.harrietcarter.com; Secure; HttpOnly