| Content-Type | text/html |
| Transfer-Encoding | chunked |
| Connection | keep-alive |
| Last-Modified | Tue, 06 Feb 2018 20:28:13 GMT |
| Cache-Control | public, max-age=172800, must-revalidate |
| Expires | Sat, 10 Feb 2018 20:00:45 +0000 |
| Strict-Transport-Security | max-age=631138519 |
| Content-Security-Policy | default-src 'self' *.benefix.us benefix.us *.zopim.com wss://*.zopim.com *.zopim.io *.stripe.com; base-uri 'self'; block-all-mixed-content; child-src *.benefix.us benefix.us calendly.com *.calendly.com *.youtube.com *.hubspot.com; connect-src 'self' *.benefix.us benefix.us benefix.zendesk.com wss://*.zopim.com *.hubspot.com *.hubspot.net benefix-enrollment-development.s3-us-west-2.amazonaws.com benefix-enrollment-production.s3-us-west-2.amazonaws.com benefix-enrollment-staging.s3-us-west-2.amazonaws.com *.google-analytics.com; font-src 'self' *.benefix.us benefix.us data: fonts.gstatic.com fonts.googleapis.com/ *.zopim.com use.typekit.net fonts.typekit.net; img-src 'self' *.benefix.us benefix.us data: *.google-analytics.com code.jquery.com *.stripe.com stats.g.doubleclick.net *.hubspot.com *.hubspot.net hubspot-leadin-images-prod.s3.amazonaws.com *.zopim.com *.zopim.io s3.amazonaws.com p.typekit.net *.adnxs.com *.linkedin.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.benefix.us benefix.us *.newrelic.com bam.nr-data.net *.stripe.com *.typekit.net *.google-analytics.com calendly.com assets.zendesk.com js.leadin.com js.hs-scripts.com *.zopim.com js.hs-analytics.net js.hsleadflows.net api.usemessages.com js.hscollectedforms.net *.cloudflare.com *.jquery.com *.youtube.com *.ytimg.com *.googletagmanager.com *.linkedin.com *.licdn.com js.usemessages.com secure.adnxs.com; style-src 'self' 'unsafe-inline' *.benefix.us benefix.us fonts.googleapis.com code.jquery.com use.typekit.net fonts.googleapis.com/; report-uri https://benefix.report-uri.com/r/d/csp/reportOnly?env=true |
| Referrer-Policy | origin-when-cross-origin |
| X-Content-Type-Options | nosniff |
| X-Download-Options | noopen |
| X-Frame-Options | DENY |
| X-Permitted-Cross-Domain-Policies | none |
| X-Xss-Protection | 1; mode=block |
| Via | 1.1 vegur |
| Expect-CT | max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" |
| Server | cloudflare |
| CF-RAY | 3ea897562ec23fcb-YUL |
| Content-Encoding | gzip |