Expires: Tue, 20 Feb 2018 19:41:27 +0000
HTTP/1.1 200 OK
Via: 1.1 vegur
X-Content-Type-Options: nosniff
CF-RAY: 3ef8327fada897a4-FRA
Transfer-Encoding: chunked
Cache-Control: public, max-age=172800, must-revalidate
Content-Type: text/html
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
X-Download-Options: noopen
Connection: keep-alive
Server: cloudflare
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Set-Cookie: __cfduid=d2decefb959c4f8be6cb78fde4850e6091519032519; expires=Tue, 19-Feb-19 09:28:39 GMT; path=/; domain=.benefix.us; HttpOnly
Strict-Transport-Security: max-age=631138519
X-Frame-Options: DENY
Date: Mon, 19 Feb 2018 09:28:40 GMT
Content-Security-Policy: default-src 'self' *.benefix.us benefix.us *.zopim.com wss://*.zopim.com *.zopim.io *.stripe.com; base-uri 'self'; block-all-mixed-content; child-src *.benefix.us benefix.us calendly.com *.calendly.com *.youtube.com *.hubspot.com; connect-src 'self' *.benefix.us benefix.us benefix.zendesk.com wss://*.zopim.com *.hubspot.com *.hubspot.net benefix-enrollment-development.s3-us-west-2.amazonaws.com benefix-enrollment-production.s3-us-west-2.amazonaws.com benefix-enrollment-staging.s3-us-west-2.amazonaws.com *.google-analytics.com; font-src 'self' *.benefix.us benefix.us data: fonts.gstatic.com fonts.googleapis.com/ *.zopim.com use.typekit.net fonts.typekit.net; img-src 'self' *.benefix.us benefix.us data: *.google-analytics.com code.jquery.com *.stripe.com stats.g.doubleclick.net *.hubspot.com *.hubspot.net hubspot-leadin-images-prod.s3.amazonaws.com *.zopim.com *.zopim.io s3.amazonaws.com p.typekit.net *.adnxs.com *.linkedin.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.benefix.us benefix.us *.newrelic.com bam.nr-data.net *.stripe.com *.typekit.net *.google-analytics.com calendly.com assets.zendesk.com js.leadin.com js.hs-scripts.com *.zopim.com js.hs-analytics.net js.hsleadflows.net api.usemessages.com js.hscollectedforms.net *.cloudflare.com *.jquery.com *.youtube.com *.ytimg.com *.googletagmanager.com *.linkedin.com *.licdn.com js.usemessages.com secure.adnxs.com gist.github.com; style-src 'self' 'unsafe-inline' *.benefix.us benefix.us fonts.googleapis.com code.jquery.com use.typekit.net fonts.googleapis.com/ assets-cdn.github.com; report-uri https://benefix.report-uri.com/r/d/csp/reportOnly?env=true
Last-Modified: Fri, 16 Feb 2018 17:38:57 GMT