| content-type: |
text/html |
| content-length: |
13264 |
| connection: |
close |
| date: |
Tue, 01 Oct 2024 12:55:39 GMT |
| last-modified: |
Mon, 30 Sep 2024 17:34:08 GMT |
| x-amz-server-side-encryption: |
AES256 |
| cache-control: |
max-age=0, must-revalidate |
| accept-ranges: |
bytes |
| server: |
static |
| set-cookie: |
geolocated_country=NL; Path=/ |
| content-security-policy: |
img-src https://* data: 'self' https://px.ads.linkedin.com https://www.linkedin.com https://p.adsymptotic.com https://bat.bing.com https://freewill.wpengine.com https://wp.wpenginepowered.com https://wordpress.freewill.com https://s3-us-west-2.amazonaws.com https://www.google-analytics.com https://*.g.doubleclick.net https://www.google.com https://*.googletagmanager.com https://*.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com https://track.hubspot.com https://*.hsforms.com https://*.hubspot.com https://www.facebook.com https://cx.atdmt.com https://script.hotjar.com https://optimize.google.com https://www.googleoptimize.com https://rs.fullstory.com https://*.churnzero.net https://ct.pinterest.com https://*.getsitecontrol.com https://*.getsitectrl.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://s3.amazonaws.com https://cdn.pushcrew.com https://chart.googleapis.com https://wingify-assets.s3.amazonaws.com https://*.stripe.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://optimize.google.com https://www.googleoptimize.com https://fonts.googleapis.com https://*.churnzero.net https://fonts.gstatic.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://s3.amazonaws.com https://cdn.pushcrew.com; font-src 'self' data: https://fonts.gstatic.com https://script.hotjar.com https://*.churnzero.net https://fonts.googleapis.com https://*.givechariot.com; connect-src 'self' https://cloud.iexapis.com https://www.facebook.com https://bat.bing.com https://*.clarity.ms https://c.bing.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.googletagmanager.com https://www.google.com https://*.g.doubleclick.net https://adservice.google.com https://www.googleadservices.com https://*.execute-api.us-west-2.amazonaws.com https://wordpress.freewill.com https://freewill.wpengine.com https://wp.wpenginepowered.com https://sentry.io https://boards-api.greenhouse.io https://*.hubspot.com https://*.hsforms.net https://*.hsforms.com https://*.hubapi.com https://*.nationwide.com https://rs.fullstory.com https://dpm.demdex.net wss://*.hotjar.com https://*.hotjar.io https://*.hotjar.com https://*.churnzero.net https://ct.pinterest.com https://*.getsitecontrol.com https://*.getsitectrl.com https://*.givechariot.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://fw-mercer-prod.us.auth0.com https://fw-mercer-demo.us.auth0.com https://px.ads.linkedin.com https://*.statsigapi.net https://statsigapi.net https://featuregates.org https://checkout.stripe.com https://api.stripe.com; form-action 'self' https://forms.hubspot.com https://*.hsforms.net https://*.hsforms.com https://www.facebook.com https://*.visualwebsiteoptimizer.com; frame-src *; child-src https://*.churnzero.net https://www.youtube.com blob:; media-src https://*.churnzero.net https://freewillpbc.s3.us-west-2.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googleadservices.com https://tpc.googlesyndication.com https://www.google.com https://*.googletagmanager.com https://googleads.g.doubleclick.net https://tagmanager.google.com https://bat.bing.com https://*.clarity.ms https://c.bing.com https://*.hs-scripts.com https://js.hs-banner.com https://js.hsforms.net https://forms.hsforms.com https://js.hsleadflows.net https://js.hs-analytics.net https://*.usemessages.com https://*.hubspot.com https://js.hsadspixel.net https://js.hscollectedforms.net https://www.google-analytics.com https://static.hotjar.com https://script.hotjar.com https://snap.licdn.com https://px.ads.linkedin.com https://connect.facebook.net https://*.nationwide.com https://nexus.ensighten.com https://edge.fullstory.com https://www.fullstory.com https://fullstory.com https://*.plaid.com https://*.churnzero.net https://optimize.google.com https://www.googleoptimize.com https://*.freewillinternal.com/ https://s.pinimg.com https://*.getsitecontrol.com https://*.getsitectrl.com https://*.givechariot.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://cdn.pushcrew.com https://checkout.stripe.com https://connect-js.stripe.com https://js.stripe.com; frame-ancestors 'self'; report-uri https://o609278.ingest.sentry.io/api/5746814/security/?sentry_key=fc1e9f3de08c48018cc4b77705c8fdea; |
| strict-transport-security: |
max-age=63072000; includeSubDomains |
| permissions-policy: |
microphone=() |
| x-content-type-options: |
nosniff |
| referrer-policy: |
strict-origin-when-cross-origin |
| etag: |
"c8f70d380ac62276f65099a3cad66135" |
| vary: |
Accept-Encoding |
| x-cache: |
Error from cloudfront |
| via: |
1.1 badae0844eca8f0bad6677607d947120.cloudfront.net (CloudFront) |
| x-amz-cf-pop: |
PRG50-C1 |
| x-amz-cf-id: |
Cd_PrRgShFFyBsp1K9hYNnz6cchmLXZU6td0byQ81OY2YR8myF5hSg== |
