HTTP/1.1 200 OK
Date: Fri, 03 Jun 2022 20:58:45 GMT
Cache-Control: no-cache, private
X-Debug-Token: d0bf0a
X-Robots-Tag: noindex
Vary: Accept-Encoding
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
Set-Cookie: visid_incap_2449453=g1DXXyJtSfS1PvmAkl5k4wR2mmIAAAAAQUIPAAAAAAD0UhpN26uhCfp2caBc6gW5; expires=Sat, 03 Jun 2023 07:57:32 GMT; HttpOnly; path=/; Domain=.avantax.com; Secure; SameSite=None
Set-Cookie: incap_ses_525_2449453=ePXHOWCOaXBUTk3Zdi1JBwV2mmIAAAAAAiglEHu/F9N7+uqARDXmqQ==; path=/; Domain=.avantax.com; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000
X-CDN: Imperva
Content-Security-Policy-Report-Only: connect-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: www.google.com *.facebook.com bat.bing.com gtm-k72ktcz-njawm.uc.r.appspot.com; default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: www.google.com; style-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: *.googleapis.com; form-action  *.facebook.com; img-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: *.facebook.com bat.bing.com www.google.com images.ctfassets.net fonts.gstatic.com; font-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: fonts.gstatic.com; script-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: www.google.com bat.bing.com https www.gstatic.com www.googletagmanager.com; frame-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: *.facebook.com www.google.com; report-uri /csp_report
X-Iinfo: 4-14420002-14198285 pNNN RT(1654289924699 60) q(0 0 0 1) r(5 5) U12