HTTP/1.1 200 OK
Cache-Control: no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.demdex.net *.eloqua.com *.en25.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.gstatic.com *.pinterest.com *.twimg.com ajax.aspnetcdn.com analytics.twitter.com apis.google.com bat.bing.com cdn-akamai.mookie1.com cdn.ampproject.org cdn.fontawesome.com connect.facebook.net ds-aksb-a.akamaihd.net googleads.g.doubleclick.net http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ https://publish.twitter.com https://s.ytimg.com https://syndication.twitter.com/ https://www.youtube.com/iframe_api js.hs-analytics.net js.hs-scripts.com maps.googleapis.com marketing.adobe.com munchkin.marketo.net nebula-cdn.kampyle.com optimize.google.com platform.linkedin.com platform.twitter.com s.ytimg.com script.hotjar.com static.ads-twitter.com static.hotjar.com tagmanager.google.com tags.tiqcdn.com www.cdic.ca www.google.com www.googletagmanager.com www.sadc.ca www.youtube.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.demdex.net *.eloqua.com *.en25.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.gstatic.com *.pinterest.com *.twimg.com ajax.aspnetcdn.com analytics.twitter.com apis.google.com bat.bing.com cdn-akamai.mookie1.com cdn.ampproject.org cdn.fontawesome.com connect.facebook.net ds-aksb-a.akamaihd.net googleads.g.doubleclick.net http://platform.stumbleupon.com/1/widgets.js https://dec.azureedge.net/ https://publish.twitter.com https://s.ytimg.com https://syndication.twitter.com/ https://www.youtube.com/iframe_api js.hs-analytics.net js.hs-scripts.com maps.googleapis.com marketing.adobe.com munchkin.marketo.net nebula-cdn.kampyle.com optimize.google.com platform.linkedin.com platform.twitter.com s.ytimg.com script.hotjar.com static.ads-twitter.com static.hotjar.com tagmanager.google.com tags.tiqcdn.com www.cdic.ca www.google.com www.googletagmanager.com www.sadc.ca www.youtube.com; font-src 'self' *.pinterest.com data: fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com optimize.google.com tagmanager.google.com www.googletagmanager.com; img-src 'self' *.demdex.net *.eloqua.com *.google-analytics.com *.googleapis.com *.gstatic.com *.pinterest.com *.twimg.com bat.bing.com blob: cm.everesttech.net cx.atdmt.com data: https://*.dec.sitefinity.com https://dec.azureedge.net https://delicious.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://syndication.twitter.com img.youtube.com optimize.google.com pbs.twimg.com pcfinancial.sc.omtrdc.net platform.tumblr.com platform.twitter.com/css/ stats.g.doubleclick.net t.co t.com tagmanager.google.com track.hubspot.com udc-neb.kampyle.com web.facebook.com www.facebook.com www.google.ca www.google.com www.googletagmanager.com www.linkedin.com www.redditstatic.com nebula-cdn.kampyle.com ds-aksb-a.akamaihd.net; media-src 'self' *.pinterest.com blob: data: optimize.google.com tagmanager.google.com www.googletagmanager.com; frame-src 'self' *.demdex.net *.doubleclick.net *.pinterest.com cdn-akamai.mookie1.com optimize.google.com platform.twitter.com tagmanager.google.com tags.tiqcdn.com vars.hotjar.com www.googletagmanager.com www.youtube.com nebula-cdn.kampyle.com; child-src 'self' *.demdex.net *.pinterest.com accounts.google.com apis.google.com badge.stumbleupon.com https://platform.twitter.com/ https://player.vimeo.com/ https://syndication.twitter.com/ https://w.soundcloud.com/ https://www.youtube.com/ optimize.google.com staticxx.facebook.com tagmanager.google.com vars.hotjar.com web.facebook.com www.facebook.com www.googletagmanager.com; connect-src 'self' *.demdex.net *.g.doubleclick.net *.hotjar.com *.hotjar.io *.mktoresp.com *.pinterest.com accounts.google.com https://*.dec.sitefinity.com https://dec.azureedge.net https://delicious.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png https://syndication.twitter.com optimize.google.com pcfinancial.sc.omtrdc.net tagmanager.google.com www.facebook.com www.google-analytics.com www.googletagmanager.com www.linkedin.com www.redditstatic.com;
Referrer-Policy: no-referrer-when-downgrade
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Access-Control-Allow-Origin: https://www.pcfinancial.ca
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: POST,GET,OPTIONS,PUT,DELETE
X-OneAgent-JS-Injection: true
X-ruxit-JS-Agent: true
Content-Length: 61135
Date: Fri, 19 Jul 2019 12:38:39 GMT
Connection: keep-alive
Set-Cookie: dtCookie=26$998C5D5494D81C4CDD4C94318CAE1A9A; Path=/; Domain=.pcfinancial.ca