HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Liftoff Web Application v2.0
Set-Cookie: ASP.NET_SessionId=mgaoahelqxhftcq5cj3wetk0; path=/; secure; HttpOnly; SameSite=Lax
Local-Name: LP-WEB-PROD-002
Content-Security-Policy: default-src 'self' *.liftoff.shop *.dev-liftoff.shop *.qa-liftoff.shop *.stage-liftoff.shop static-v.tawk.to; connect-src 'self' *.liftoff.shop *.dev-liftoff.shop *.qa-liftoff.shop *.stage-liftoff.shop liftoff-shop.imgix.net dev-liftoff-shop.imgix.net qa-liftoff-shop.imgix.net ads.adaptv.advertising.com v.algovid.com vast.aniview.com conversations.app-us1.com ima3vpaid.appspot.com stats.g.doubleclick.net www.facebook.com *.fontawesome.com www.google-analytics.com translate.googleapis.com *.klaviyo.com invisiblearena.com *.lkqd.net svastx.moatads.com api.pmmapads.com *.purechat.com vid.springserve.com ssp.streamrail.net *.tawk.to wss://*.tawk.to app.termly.io *.ucweb.com *.vertamedia.com *.wishpond.com wss://artisan.wishpond.com *.yotpo.com *.zdassets.com *.zendesk.com salesiq.zoho.com salesiq.zohopublic.com vts.zohopublic.com wss://vts.zohopublic.com; font-src 'self' *.liftoff.shop *.dev-liftoff.shop *.qa-liftoff.shop *.stage-liftoff.shop storage.googleapis.com themes.googleusercontent.com fonts.gstatic.com http://fonts.gstatic.com *.fontawesome.com cdn.honey.io *.tawk.to *.typekit.net staticw2.yotpo.com css.zohostatic.com fonts.zohostatic.com data:; frame-ancestors 'self' *.liftoff.shop *.dev-liftoff.shop *.qa-liftoff.shop *.stage-liftoff.shop admin.mybrandhub.com http://dev.ustsubaki.thomaswebs.net www.ustsubaki.com; frame-src 'self' *.liftoff.shop *.dev-liftoff.shop *.qa-liftoff.shop *.stage-liftoff.shop shop.bartonmalow.com *.brandfuel.com concordadportal.com www.cooley-conifer.com shop.ellios.com aldiuniforms.lipic.com *.mybrandhub.com www.onlinechecksordering.com www.rentpathstore.com mylogon.reyesholdings.com www.syracusemonopoly.com wadetrimhubstore.com s3.amazonaws.com www.facebook.com *.google.com www.googletagmanager.com *.mode.com myquizwiz.com sso.connect.pingidentity.com api.pmmapads.com cdn.pmmapads.com api.pmqzads.com cdn.pmqzads.com www.rollapp.com *.tawk.to app.termly.io player.theplatform.com player.vimeo.com cdn.wishpond.net embedded.wishpondpages.com fast.wistia.net www.youtube.com *.zohopublic.com; img-src * data:; object-src 'self' *.liftoff.shop *.dev-liftoff.shop *.qa-liftoff.shop *.stage-liftoff.shop www.metronbranding.com; script-src 'self' *.liftoff.shop *.dev-liftoff.shop *.qa-liftoff.shop *.stage-liftoff.shop s3.amazonaws.com *.answerdash.com appsource.cool diffuser-cdn.app-us1.com prism.app-us1.com ct.capterra.com chimpstatic.com cdnjs.cloudflare.com connect.facebook.net feedier.com *.formstack.com *.fontawesome.com translate.google.com www.google.com tagmanager.google.com www.google-analytics.com ajax.googleapis.com translate.googleapis.com www.googletagmanager.com www.gstatic.com invisiblearena.com code.jquery.com cdn.jsdelivr.net *.klaviyo.com *.list-manage.com loadsource.org downloads.mailchimp.com *.mode.com cdn.pmmapads.com *.purechat.com *.purechatcdn.com embed.tawk.to app.termly.io saml.threatpulse.net:8443 trackcmp.net *.webix.com cdn.wishpond.net fast.wistia.net *.yotpo.com *.zdassets.com salesiq.zoho.com js.zohostatic.com 'unsafe-eval' 'unsafe-inline'; style-src 'self' *.liftoff.shop *.dev-liftoff.shop *.qa-liftoff.shop *.stage-liftoff.shop diffuser-cdn.app-us1.com cdnjs.cloudflare.com *.fontawesome.com *.formstack.com fonts.googleapis.com translate.googleapis.com cdn.jsdelivr.net *.klaviyo.com gfas.launchpadmts.com cdn-images.mailchimp.com downloads.mailchimp.com cdn.pmmapads.com api.pmqzads.com cdn.pmqzads.com saml.threatpulse.net:8443 *.typekit.net *.yotpo.com css.zohostatic.com 'unsafe-inline'; report-uri https://my.liftoff.shop/handlers/CSPReportHandler.ashx
Content-Security-Policy-Report-Only: 
Referrer-Policy: origin-when-cross-origin
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=86400; includeSubdomains
Date: Wed, 23 Dec 2020 01:07:07 GMT
Content-Length: 12262
Via: 1.1 google
Alt-Svc: clear