| accept-ranges: |
none |
| access-control-allow-origin: |
: https://inspectlet.com |
| access-control-expose-headers: |
Server-Timing |
| cache-control: |
no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0 |
| content-security-policy: |
default-src 'self' https://go.mercurycards.com; style-src * 'unsafe-inline' https://hcaptcha.com https://*.hcaptcha.com; frame-ancestors 'self' https://cp.apply.creditkarma.com/ https://*.facebook.com https://embedded.creditkarma.com/ http://development.amazon.com/ http://pre-prod.amazon.com/ https://www.amazon.com/ https://*.amazon.com/; frame-src 'self' blob: https://testflex.cybersource.com https://flex.cybersource.com https://cmp.osano.com https://connect2.finicity.com https://hcaptcha.com https://*.hcaptcha.com https://s.amazon-adsystem.com https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/ https://1.b406929acabac9b095f124c81bdfcf57f.com/ https://1.c81358859121583b7adf2ace89cb39f44.com/ https://bcdn-god.we-stats.com https://mercuryfinancialciam.okta.com https://www.google.com https://www.inspectlet.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://cdn.trustev.com; object-src 'self' blob:; font-src 'self' * data:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.kameleoon.eu https://testflex.cybersource.com https://flex.cybersource.com https://cmp.osano.com https://go.mercurycards.com https://banner.urlgeni.us https://hcaptcha.com https://*.hcaptcha.com https://c.amazon-adsystem.com https://bcdn-god.we-stats.com https://*.qualtrics.com https://*.fullstory.com https://www.googleadservices.com https://partner.googleadservices.com https://tagmanager.google.com https://mpsnare.iesnare.com https://googlesyndication.com https://www.mercurycards.com https://workforcenow.adp.com https://adservice.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googletagservices.com https://aa.agkn.com/adscores http://www.macromedia.com https://aa.agkn.com https://pagead2.googlesyndication.com https://www.google-analytics.com https://api.cybersource.com https://apitest.cybersource.com https://cdnjs.cloudflare.com/ https://d10lpsik1i8c69.cloudfront.net https://connect.facebook.net https://cdn.inspectlet.com https://app.trustev.com https://cdn-us.trustev.com https://tpc.googlesyndication.com https://static.ads-twitter.com https://snap.licdn.com blob:; connect-src 'self' https://*.ctfassets.net https://*.contentful.com https://thefontzone.com https://*.kameleoon.com https://*.kameleoon.eu https://*.kameleoon.io https://testflex.cybersource.com https://flex.cybersource.com https://disclosure.api.osano.com https://consent.api.osano.com https://tattle.api.osano.com https://hcaptcha.com https://*.hcaptcha.com wss://mpsnare.iesnare.com https://wup.mercurycards.com https://logs.mercurycards.com https://mercuryfinancialciam.okta.com https://siteintercept.qualtrics.com https://edge.fullstory.com https://rs.fullstory.com https://*.fullstory.com https://stats.g.doubleclick.net https://www.google-analytics.com https://api.cybersource.com https://apitest.cybersource.com https://pagead2.googlesyndication.com https://settings.luckyorange.net https://hn.inspectlet.com wss://ws.inspectlet.com https://app.trustev.com https://cdn-us.trustev.com https://cdn.trustev.com; media-src 'self' data: wss://mpsnare.iesnare.com https://mpsnare.iesnare.com |
| content-type: |
text/html |
| date: |
Wed, 02 Oct 2024 21:11:50 GMT |
| etag: |
W/"84587-1727375425816" |
| expires: |
Wed, 02 Oct 2024 22:11:50 GMT |
| feature-policy: |
accelerometer 'none'; autoplay 'none'; camera 'none'; document-domain 'none'; encrypted-media 'none'; fullscreen 'none'; geolocation 'self'; gyroscope 'none'; accelerometer 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'self'; picture-in-picture 'none'; publickey-credentials-get 'none'; sync-xhr 'none'; usb 'none'; xr-spatial-tracking 'none' |
| last-modified: |
Thu, 26 Sep 2024 18:30:25 GMT |
| pragma: |
no-cache |
| referrer-policy: |
no-referrer |
| server-timing: |
traceparent;desc="00-0d65ce39791ba96e1cfbd9318ce4fc97-565cf4e6634fe04d-01" |
| strict-transport-security: |
max-age=31536000 |
| x-content-type-options: |
nosniff |
| connection: |
Close |
| set-cookie: |
visid_incap_1579778=8n2fi0p6Qp6ZLKZXmaavLBW3/WYAAAAAQUIPAAAAAADjM5+MOFlxuR/1RLNyUdnd; expires=Thu, 02 Oct 2025 15:33:58 GMT; HttpOnly; path=/; Domain=.mercurycards.com; Secure; SameSite=None,nlbi_1579778=8oOHD2WfJxkALkpLvTNn/AAAAAASfZ31oOxty+6WJ6hl4Epn; HttpOnly; path=/; Domain=.mercurycards.com; Secure; SameSite=None,incap_ses_772_1579778=CQTyasPyYQO4nk8mFbK2Cha3/WYAAAAANHXNR4Gzq+y0MWNi8KQRLQ==; path=/; Domain=.mercurycards.com; Secure; SameSite=None |
| x-cdn: |
Imperva |
| transfer-encoding: |
chunked |
| x-iinfo: |
3-12761337-12761341 NNNN CT(192 381 0) RT(1727903509618 108) q(0 1 6 0) r(7 7) U9 |
