HTTP/1.0 200 OK
Content-Type: text/html; charset=UTF-8
Server: nginx/1.14.2
Cache-Control: no-cache
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
X-Frame-Options: sameorigin
Content-Security-Policy: default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src https: data:; connect-src https: wss:
Feature-Policy: geolocation 'none'; midi 'none'; microphone 'none'; camera 'none'; autoplay 'none'; vr 'none'; fullscreen 'self'; payment 'none';
Referrer-Policy: strict-origin
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Cache-Control: max-age=600, private, must-revalidate
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: master-only
Access-Control-Allow-Origin: https://www.asurion.com
Access-Control-Allow-Origin: https://www.google.com
Date: Wed, 31 Jul 2019 07:00:03 GMT
Content-Length: 44464
Connection: close