| Server | Cowboy |
| Connection | keep-alive |
| Etag | "3552b9b863f69623d96ae27a6c31ab0973d88fb7" |
| Vary | Accept-Encoding |
| Accept-Ranges | bytes |
| Cache-Control | public, max-age=3600 |
| Last-Modified | Sun, 05 Nov 2017 01:30:38 GMT |
| X-Frame-Options | SAMEORIGIN |
| Content-Encoding | gzip |
| X-Xss-Protection | 1; mode=block |
| X-Content-Type-Options | nosniff |
| Content-Security-Policy | default-src 'none'; connect-src 'self' *.youtube.com; frame-src 'self' player.vimeo.com plot.ly *.youtube.com *.google.com aexp.demdex.net *.aexp.demdex.net *.omtrdc.net; style-src 'self' 'unsafe-inline' *.googleapis.com; font-src 'self' *.gstatic.com; img-src 'self' cdn2.plenti.com *.google-analytics.com *.googleapis.com *.gstatic.com data: stats.g.doubleclick.net loyaltypartner.122.2o7.net *.omtrdc.net *.ggpht.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.google-analytics.com *.gstatic.com *.google.com *.googleapis.com cdnjs.cloudflare.com assets.adobedtm.com aexp.demdex.net *.omtrdc.net seal-chicago.bbb.org; |
| X-Permitted-Cross-Domain-Policies | master-only |
| Content-Type | text/html; charset=utf-8 |
| Via | 1.1 vegur |