HTTP/1.1 200 OK
Server: nginx
Date: Sat, 26 Sep 2020 03:36:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: YFSESSID=db99a29e525ed9e01d536f8487acfce9; path=/; secure; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-DNS-Prefetch-Control: on
Referrer-Policy: no-referrer-when-downgrade
Content-Security-Policy: default-src 'self' *.google.com *.googleusercontent.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googleusercontent.com *.googlesyndication.com *.googletagmanager.com *.recaptcha.net *.gstatic.com *.google-analytics.com *.doubleclick.net *.godaddy.com *.zdassets.com *.zopim.com *.cloudflare.com *.ysicorp.com *.ysifintech.com *.ysifx.com; object-src 'self' *.google.com *.googleusercontent.com *.bing.com *.bing.net; style-src 'self' data: 'unsafe-inline' *.google.com *.googleusercontent.com *.google-analytics.com *.googleapis.com *.doubleclick.net *.ysicorp.com *.ysifintech.com *.ysifx.com; img-src 'self' data: *.google.com *.googleusercontent.com *.google-analytics.com *.doubleclick.net *.googleapis.com *.googletagmanager.com *.googleusercontent.com *.fbcdn.net *.facebook.com *.dropbox.com *.bing.com *.bing.net *.zopim.com *.ysicorp.com *.ysifintech.com *.ysifx.com; media-src 'self' data: *.google.com *.googleusercontent.com *.googleapis.com *.bing.com *.bing.net *.zdassets.com; manifest-src 'self' *.ysicorp.com *.ysifintech.com *.ysifx.com; frame-src 'self' *.google.com *.doubleclick.net *.bing.com *.bing.net; child-src 'self' *.google.com *.googleusercontent.com *.bing.com *.bing.net; font-src 'self' 'unsafe-inline' data: *.google.com *.googleusercontent.com *.gstatic.com *.zopim.com *.ysicorp.com *.ysifintech.com *.ysifx.com; connect-src 'self' *.gstatic.com *.google-analytics.com *.googleapis.com *.doubleclick.net *.zendesk.com *.zdassets.com wss://*.zopim.com
X-Content-Security-Policy: default-src 'self' *.google.com *.googleusercontent.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googleusercontent.com *.googlesyndication.com *.googletagmanager.com *.recaptcha.net *.gstatic.com *.google-analytics.com *.doubleclick.net *.godaddy.com *.zdassets.com *.zopim.com *.cloudflare.com *.ysicorp.com *.ysifintech.com *.ysifx.com; object-src 'self' *.google.com *.googleusercontent.com *.bing.com *.bing.net; style-src 'self' data: 'unsafe-inline' *.google.com *.googleusercontent.com *.google-analytics.com *.googleapis.com *.doubleclick.net *.ysicorp.com *.ysifintech.com *.ysifx.com; img-src 'self' data: *.google.com *.googleusercontent.com *.google-analytics.com *.doubleclick.net *.googleapis.com *.googletagmanager.com *.googleusercontent.com *.fbcdn.net *.facebook.com *.dropbox.com *.bing.com *.bing.net *.zopim.com *.ysicorp.com *.ysifintech.com *.ysifx.com; media-src 'self' data: *.google.com *.googleusercontent.com *.googleapis.com *.bing.com *.bing.net *.zdassets.com; manifest-src 'self' *.ysicorp.com *.ysifintech.com *.ysifx.com; frame-src 'self' *.google.com *.doubleclick.net *.bing.com *.bing.net; child-src 'self' *.google.com *.googleusercontent.com *.bing.com *.bing.net; font-src 'self' 'unsafe-inline' data: *.google.com *.googleusercontent.com *.gstatic.com *.zopim.com *.ysicorp.com *.ysifintech.com *.ysifx.com; connect-src 'self' *.gstatic.com *.google-analytics.com *.googleapis.com *.doubleclick.net *.zendesk.com *.zdassets.com wss://*.zopim.com