| date: |
Tue, 01 Oct 2024 18:43:14 GMT |
| content-type: |
text/html; charset=UTF-8 |
| transfer-encoding: |
chunked |
| connection: |
close |
| cache-control: |
max-age=86400, public, s-maxage=2628000 |
| x-drupal-dynamic-cache: |
MISS |
| content-language: |
en |
| x-content-type-options: |
nosniff |
| x-frame-options: |
SAMEORIGIN |
| expires: |
Sun, 19 Nov 1978 05:00:00 GMT |
| vary: |
Cookie,Accept-Encoding |
| content-security-policy: |
default-src 'self' 'unsafe-inline' api-gateway.mappedin.com vars.hotjar.com www.youtube.com connect.facebook.net bid.g.doubleclick.net www.facebook.com *.googlesyndication.com pagesense-collect.zoho.com cdn.curator.io api.curator.io ad.doubleclick.net *.sojern.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' api-gateway.mappedin.com d1p5cqqchvbqmy.cloudfront.net *.google-analytics.com *.googletagmanager.com *.google.com *.googleapis.com *.edgenyc.dev.dd:8083 *.dev-www.edgenyc.com *.loadtest.edgenyc.com *.edgenyc.com *.edgenycstg.prod.acquia-sites.com *.edgenycra.prod.acquia-sites.com static.hotjar.com stats.g.doubleclick.net connect.facebook.net script.hotjar.com *.gstatic.com js-agent.newrelic.com bam.nr-data.net www.youtube.com s.ytimg.com cdn.ampproject.org secure.leadforensics.com static.ads-twitter.com snap.licdn.com sjs.bizographics.com px.ads.linkedin.com dc.ads.linkedin.com analytics.twitter.com adadvisor.net js.hs-scripts.com js.hs-analytics.net bat.bing.com/ www.googleadservices.com googleads.g.doubleclick.net cdn.jsdelivr.net cdnjs.cloudflare.com *.adform.net *.googlesyndication.com *.pagesense.io *.clarity.ms pagesense-collect.zoho.com static.zohocdn.com *.curator.io ad.doubleclick.net *.sojern.com *.cookielaw.org script.crazyegg.com *.quantserve.com *.quantcount.com *.yieldoptimizer.com js.adsrvr.org analytics.tiktok.com *.adnxs.com *.teads.tv static.zdassets.com ekr.zdassets.com wss://pod-19.zendesk.com pod-19.zendesk.com *.tintup.com cdn.hypemarks.com *.sojern.com; object-src 'none'; img-src 'self' data: *.google-analytics.com *.googletagmanager.com *.google.com *.google.ca *.googleapis.com *.googlesyndication.com *.edgenyc.dev.dd:8083 *.dev-www.edgenyc.com *.loadtest.edgenyc.com *.edgenyc.com *.edgenycstg.prod.acquia-sites.com *.edgenycra.prod.acquia-sites.com static.hotjar.com stats.g.doubleclick.net connect.facebook.ne script.hotjar.com connect.facebook.net *.gstatic.com js-agent.newrelic.com bam.nr-data.net *.youtube.com s.ytimg.com cdn.ampproject.org secure.leadforensics.com static.ads-twitter.com snap.licdn.com sjs.bizographics.com *.ads.linkedin.com analytics.twitter.com adadvisor.net js.hs-scripts.com js.hs-analytics.net bat.bing.com www.googleadservices.com d3j72de684fey1.cloudfront.net cdn.jsdelivr.net *.clarity.ms *.pagesense.io *.googlesyndication.com *.adform.net pagesense-collect.zoho.com *.bing.com *.doubleclick.net *.cookielaw.org *.adnxs.com *.sojern.com *.adsrvr.org *.facebook.com *.streetmetrics.io *.quantserve.com analytics.tiktok.com *.adnxs.com *.teads.tv *.rlcdn.com tag.adaraanalytics.com *.demdex.net *.stackadapt.com *.analytics.yahoo.com *.yieldoptimizer.com *.turn.com edgenyc.zendesk.com related.zendesk.com *.seadform.net *.sojern.com; frame-src 'self' www.youtube.com player.vimeo.com twitter.com x.com www.dailymotion.com insight.adsrvr.org fledge.teads.tv www.google.com *.fls.doubleclick.net *.adform.net cdn.hypemarks.com *.sojern.com *.adsrvr.org; frame-ancestors 'self' *.edgenyc.com *.edgenycstg.prod.acquia-sites.com *.edgenycra.prod.acquia-sites.com *.ddev.site; font-src 'self' data: fonts.gstatic.com *.googleapis.com edgenyc.ddev.site dev-www.edgenyc.com stage-www.edgenyc.com *.loadtest.edgenyc.com *.edgenyc.com *.edgenycstg.prod.acquia-sites.com *.edgenycra.prod.acquia-sites.com cdn.curator.io; connect-src 'self' blob: *.mappedin.com d3j72de684fey1.cloudfront.net sentry.io *.google-analytics.com *.clarity.ms pagesense-collect.zoho.com *.googletagmanager.com *.google.com *.googleapis.com *.edgenyc.dev.dd:8083 *.dev-www.edgenyc.com *.loadtest.edgenyc.com *.edgenyc.com *.edgenycstg.prod.acquia-sites.com *.edgenycra.prod.acquia-sites.com static.hotjar.com stats.g.doubleclick.net connect.facebook.ne script.hotjar.com connect.facebook.net *.gstatic.com js-agent.newrelic.com bam.nr-data.net www.youtube.com s.ytimg.com cdn.ampproject.org secure.leadforensics.com static.ads-twitter.com snap.licdn.com sjs.bizographics.com px.ads.linkedin.com dc.ads.linkedin.com analytics.twitter.com adadvisor.net js.hs-scripts.com js.hs-analytics.net bat.bing.com www.googleadservices.com googleads.g.doubleclick.net *.googlesyndication.com *.pagesense.io *.adform.net api.curator.io *.cookielaw.org *.onetrust.com ad.doubleclick.net beacon.sojern.com *.onetrust.com analytics.tiktok.com *.adnxs.com *.teads.tv script.crazyegg.com ekr.zdassets.com edgenyc.zendesk.com wss://pod-19.zendesk.com api.tintup.com cognito-identity.us-east-1.amazonaws.com kinesis.us-east-1.amazonaws.com/ *.sojern.com zendesk-eu.my.sentry.io; report-uri /report-csp-violation |
| x-xss-protection: |
1; mode=block |
| strict-transport-security: |
max-age=31536000; includeSubDomains |
| referrer-policy: |
strict-origin-when-cross-origin |
| feature-policy: |
camera 'none'; usb 'none'; microphone 'none'; accelerometer 'none' |
| surrogate-control: |
max-age=180 |
| access-control-allow-origin: |
* |
| last-modified: |
Tue, 01 Oct 2024 16:11:50 GMT |
| x-request-id: |
v-ddc94452-800f-11ef-afb4-3f69a8f5fddf |
| x-ah-environment: |
prod |
| via: |
varnish, 1.1 lon1-bit27010 |
| x-cache: |
HIT |
| x-cache-hits: |
153 |
| cf-cache-status: |
HIT |
| server: |
cloudflare |
| cf-ray: |
8cbe98e23dfa0a6c-AMS |
