HTTP/3 307 Temporary Redirect
date: Tue, 23 Apr 2024 15:36:04 GMT
location: https://www.confirmation.com/?utm_campaign=2024%20global%20busy%20season&utm_medium=email&_hsenc=p2ANqtz-8TcVBse71EADVuwCKzq4TrMC9pYE2JOlozuiMcuhakwXe9HT_3IF7Vh3xyHNzIBcy_0DFToj66tIjQ3Re5IyKtF80UOpN3UEEGgAjjma_GJeWPRBg&_hsmi=302677479&utm_content=302677479&utm_source=hs_email
cf-ray: 878eed4fefc6b4ed-OSL
cf-cache-status: MISS
link: <https://www.confirmation.com/?utm_campaign=2024%20global%20busy%20season&utm_medium=email&_hsenc=p2ANqtz-8TcVBse71EADVuwCKzq4TrMC9pYE2JOlozuiMcuhakwXe9HT_3IF7Vh3xyHNzIBcy_0DFToj66tIjQ3Re5IyKtF80UOpN3UEEGgAjjma_GJeWPRBg&_hsmi=302677479&utm_content=302677479&utm_source=hs_email>; rel="canonical"
strict-transport-security: max-age=31536000
vary: origin, Accept-Encoding
access-control-allow-credentials: false
content-security-policy: upgrade-insecure-requests
referrer-policy: no-referrer
x-content-type-options: nosniff
x-envoy-upstream-service-time: 48
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-served-by-pod: iad02/event-tracking-td/envoy-proxy-544dd46489-jcm79
x-evy-trace-virtual-host: all
x-hubspot-correlation-id: 1d6d2b56-b0ee-4d17-ac17-950027f6d14e
x-request-id: 1d6d2b56-b0ee-4d17-ac17-950027f6d14e
x-robots-tag: none
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8Qds4sFFHt3m6GoUPxE%2F01MLaXr2NKFRCunNPzpntTZXqhaDCmYAugsVJmiJT%2FUqBhPEdZS0quVRuVqWyFrADkQq7NhoPDmHe6Rdbjn8fNdII%2Bw0EzVO9NVi7gNRVfYd9JwyTnj2Rg2k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400

HTTP/2 200 OK
date: Tue, 23 Apr 2024 15:36:04 GMT
content-type: application/javascript
content-length: 6839
content-encoding: gzip
content-md5: Pg1MHDpg+UGdovxhidM4Kg==
last-modified: Mon, 22 Apr 2024 06:06:15 GMT
etag: 0x8DC629251693167
x-ms-request-id: c4891f4a-201e-0075-77cf-9452af000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 77329
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 878eed566cd5b51b-OSL
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Wed, 08 Nov 2023 21:36:37 GMT
Accept-Ranges: bytes
ETag: "8060dba68b12da1:0"
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:04 GMT
Content-Length: 118940

HTTP/1.1 404 Not Found
Content-Type: text/html
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:04 GMT
Content-Length: 3690

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Wed, 08 Nov 2023 21:36:37 GMT
Accept-Ranges: bytes
ETag: "8060dba68b12da1:0"
Vary: Accept-Encoding
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 1170

HTTP/2 200 OK
date: Tue, 23 Apr 2024 15:36:05 GMT
content-type: application/x-javascript
content-length: 1933
cf-ray: 878eed59ccf7b500-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 24036
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DBC8CF00175703
expires: Wed, 24 Apr 2024 15:36:05 GMT
last-modified: Mon, 09 Oct 2023 13:52:38 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: A07Gwr1Pa/uLwGjgDEw++w==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 5638430f-001e-0072-6957-793ecc000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Fri, 17 Nov 2023 15:32:59 GMT
Accept-Ranges: bytes
ETag: "80878586b19da1:0"
Vary: Accept-Encoding
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 11372

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Wed, 08 Nov 2023 21:36:37 GMT
Accept-Ranges: bytes
ETag: "8060dba68b12da1:0"
Vary: Accept-Encoding
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:04 GMT
Content-Length: 804

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 08 Nov 2023 21:36:37 GMT
Accept-Ranges: bytes
ETag: "8060dba68b12da1:0"
Vary: Accept-Encoding
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 275

HTTP/2 200 OK
date: Tue, 23 Apr 2024 15:36:05 GMT
content-type: application/javascript
content-length: 89624
content-encoding: gzip
content-md5: jz950M8ZW7RakPP2zlLHZQ==
last-modified: Thu, 21 Jul 2022 06:31:17 GMT
etag: 0x8DA6AE29E465D1D
x-ms-request-id: 2bfd9bfa-301e-0069-4cce-0b00cf000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 77238
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 878eed5ae978b51b-OSL
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Wed, 08 Nov 2023 21:36:36 GMT
Accept-Ranges: bytes
ETag: "0ca42a68b12da1:0"
Vary: Accept-Encoding
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 11941

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 08 Nov 2023 21:36:37 GMT
Accept-Ranges: bytes
ETag: "8060dba68b12da1:0"
Vary: Accept-Encoding
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 345

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Fri, 09 Jun 2023 05:49:24 GMT
Accept-Ranges: bytes
ETag: "0caf524969ad91:0"
Vary: Accept-Encoding
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:04 GMT
Content-Length: 5844

HTTP/2 200 OK
date: Tue, 23 Apr 2024 15:36:05 GMT
content-type: application/x-javascript
content-length: 15562
cf-ray: 878eed5b6f19b500-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 24035
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DBC8CF08DBFCEC
expires: Wed, 24 Apr 2024 15:36:05 GMT
last-modified: Mon, 09 Oct 2023 13:52:53 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: rO/uV8E8nx5MY2Ryq+3o+Q==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 97ada6b1-601e-0039-4d7b-8cc29f000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2

HTTP/2 200 OK
date: Tue, 23 Apr 2024 15:36:05 GMT
content-type: application/json
content-length: 3007
content-encoding: gzip
content-md5: l8TaFfqEBdbGRIscoE5PLQ==
last-modified: Thu, 21 Jul 2022 06:31:09 GMT
etag: 0x8DA6AE29925C8FF
x-ms-request-id: b39aec51-701e-0035-3b09-7c5597000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 24035
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 878eed5baf53b500-OSL
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Wed, 08 Nov 2023 21:36:37 GMT
Accept-Ranges: bytes
ETag: "8060dba68b12da1:0"
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 115496

HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Wed, 08 Nov 2023 21:36:37 GMT
Accept-Ranges: bytes
ETag: "8060dba68b12da1:0"
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:04 GMT
Content-Length: 118300

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Mon, 28 Aug 2023 17:14:23 GMT
Accept-Ranges: bytes
ETag: "8081eb16d3d9d91:0"
Vary: Accept-Encoding
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 38989

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 08 Nov 2023 21:36:37 GMT
Accept-Ranges: bytes
ETag: "8060dba68b12da1:0"
Vary: Accept-Encoding
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 718

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Wed, 08 Nov 2023 21:36:37 GMT
Accept-Ranges: bytes
ETag: "8060dba68b12da1:0"
Vary: Accept-Encoding
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 1349

HTTP/1.1 404 Not Found
Content-Type: text/html
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 3690

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 15:36:05 GMT
content-type: image/png
content-length: 103952
last-modified: Tue, 10 Oct 2023 05:16:40 GMT
etag: "6524de38-19610"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Wed, 08 Nov 2023 21:36:37 GMT
Accept-Ranges: bytes
ETag: "8060dba68b12da1:0"
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 48867

HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Wed, 08 Nov 2023 21:36:37 GMT
Accept-Ranges: bytes
ETag: "8060dba68b12da1:0"
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 429

HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Tue, 10 Oct 2023 05:15:23 GMT
Accept-Ranges: bytes
ETag: "80273dc538fbd91:0"
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 13883

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 15:36:05 GMT
content-type: image/png
content-length: 127514
last-modified: Tue, 10 Oct 2023 05:14:39 GMT
etag: "6524ddbf-1f21a"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Tue, 10 Oct 2023 05:16:01 GMT
Accept-Ranges: bytes
ETag: "807ee3db38fbd91:0"
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 3350

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 15:36:05 GMT
content-type: image/png
content-length: 141953
last-modified: Tue, 10 Oct 2023 05:16:51 GMT
etag: "6524de43-22a81"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Tue, 10 Oct 2023 05:16:24 GMT
Accept-Ranges: bytes
ETag: "0499e938fbd91:0"
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 2025

HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Tue, 10 Oct 2023 05:17:25 GMT
Accept-Ranges: bytes
ETag: "80e0f4d39fbd91:0"
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 1035

HTTP/2 200 OK
date: Tue, 23 Apr 2024 15:36:05 GMT
content-type: text/css
content-md5: TLLtdkuMahUQRVIfmZNHNw==
last-modified: Thu, 21 Jul 2022 06:31:23 GMT
x-ms-request-id: 05393156-c01e-0099-0edb-12463e000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 24035
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 878eed5baf55b500-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 15:36:05 GMT
content-type: image/png
content-length: 129941
last-modified: Tue, 10 Oct 2023 05:15:55 GMT
etag: "6524de0b-1fb95"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Wed, 08 Nov 2023 21:36:37 GMT
Accept-Ranges: bytes
ETag: "8060dba68b12da1:0"
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 118940

HTTP/1.1 200 OK
Content-Type: image/x-icon
Last-Modified: Tue, 10 Oct 2023 05:14:15 GMT
Accept-Ranges: bytes
ETag: "802db59c38fbd91:0"
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:06 GMT
Content-Length: 5430

HTTP/1.1 200 OK
Content-Type: image/x-icon
Last-Modified: Tue, 10 Oct 2023 05:14:15 GMT
Accept-Ranges: bytes
ETag: "802db59c38fbd91:0"
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 5430

HTTP/2 200 OK
content-type: text/css
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 23 Apr 2024 15:36:06 GMT
age: 69801
x-served-by: cache-iad-kcgs7200134-IAD, cache-osl6542-OSL
x-cache: HIT, HIT
x-cache-hits: 30, 14263
x-timer: S1713886567.624671,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 21966
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Date: Tue, 23 Apr 2024 15:36:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://js-agent.newrelic.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://bam.nr-data.net https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.tv; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-player5.wirewax.com; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://player-telemetry.vimeo.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm-gke.vhx.com https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://bam.nr-data.net https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.hivestreaming.com https://mimir.cloud.vimeo.com https://vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://*.wirewax.com https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com; font-src data: https://edge-assets.wirewax.com https://branding.cdn.magisto.com https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://edge-assets.wirewax.com https://maps.googleapis.com android-webview-video-poster:; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com; frame-src 'self' https://*
expires: Fri, 15 Dec 1985 19:30:00 GMT
link: <https://fresnel.vimeocdn.com>; rel=preconnect; crossorigin, <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-host: player-backend-864c9b5b49-nlf9m
x-player-backend: g
x-xss-protection: 1; mode=block
x-backend-server: player-backend-edge-entry
x-bapp-server: player-backend-864c9b5b49-nlf9m
via: 1.1 varnish
x-served-by: cache-osl6531-OSL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713886566.979360,VS0,VE565
vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=L9.qf2aboagTbqYy2JtMNWO0rGSvT41s06hY_6sZaSU-1713886566-1.0.1.1-aDdfmBr3p3FLRvH_XY9YqV4YBAxRaZz1gETmzK4seR.XLWSyhyxd_gfoDkB39nQVYM1Wc3oEGF.h174eMc.tXw; path=/; expires=Tue, 23-Apr-24 16:06:06 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
_cfuvid=nAtx408QB79vNnimYm33UKaY7.zlRVjbFHcuNeNv_bk-1713886566545-0.0.1.1-604800000; path=/; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 878eed5d4af0b50f-OSL
Content-Encoding: gzip

HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 23 Apr 2024 15:36:06 GMT
age: 69800
x-served-by: cache-iad-kiad7000096-IAD, cache-osl6531-OSL
x-cache: HIT, HIT
x-cache-hits: 28, 11780
x-timer: S1713886567.700635,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 141026
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: image/avif
etag: "6c0d1983a3a9078c98281e34e0b5ad04"
x-viewmaster-lossless-format: automatic
via: 1.1 google, 1.1 varnish, 1.1 varnish
viewmaster-server: viewmaster-glb-prod
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
age: 551805
date: Tue, 23 Apr 2024 15:36:06 GMT
x-served-by: cache-dfw-kdfw8210046-DFW, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 2757, 0
x-timer: S1713886567.789299,VS0,VE1
vary: Accept
content-length: 509
X-Firefox-Spdy: h2

HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 23 Apr 2024 15:36:06 GMT
age: 69801
x-served-by: cache-iad-kjyo7100037-IAD, cache-osl6531-OSL
x-cache: HIT, HIT
x-cache-hits: 30, 11831
x-timer: S1713886567.840645,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 103659
X-Firefox-Spdy: h2

HTTP/2 200 OK
cache-control: max-age=2592000
content-type: image/avif
etag: "346936816570061fd1fa1c289134e56c"
x-viewmaster-lossless-format: automatic
via: 1.1 google, 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
age: 1534346
date: Tue, 23 Apr 2024 15:36:06 GMT
x-served-by: cache-dfw-kdal2120028-DFW, cache-hel1410028-HEL
x-cache: HIT, HIT
x-cache-hits: 1941, 0
x-timer: S1713886567.987359,VS0,VE2
vary: Accept
content-length: 4227
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Wed, 08 Nov 2023 21:36:37 GMT
Accept-Ranges: bytes
ETag: "8060dba68b12da1:0"
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:05 GMT
Content-Length: 44882

HTTP/2 200 OK
server: nginx
date: Tue, 23 Apr 2024 15:36:06 GMT
content-type: image/png
content-length: 51994
last-modified: Tue, 10 Oct 2023 05:14:44 GMT
etag: "6524ddc4-cb1a"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

HTTP/1.1 200 OK
Content-Type: text/html
Content-Encoding: gzip
Last-Modified: Wed, 10 Apr 2024 23:17:36 GMT
Accept-Ranges: bytes
ETag: "e5f743469d8bda1:0"
Vary: Accept-Encoding
Server: 
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Referrer-Policy: same-origin
Permissions-Policy: camera=(self), geolocation=(self), microphone=(self), usb=(self)
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src 'self' *.confirmation.com confirmation.com;                                                         script-src     'self' 'unsafe-inline' 'unsafe-eval' *.wpengine.com *.googletagmanager.com                                          *.google-analytics.com *.intercom.io *.hsforms.net *.hsforms.com *.hscollectedforms.net                                          *.google.com * https://*.google.com https://google.com *.intercomcdn.com *.gstatic.com *.fullstory.com https://fullstory.com *.hubspot.com                                          *.intercomcdn.com http://*.hs-analytics.net *.hsleadflows.net *.hs-scripts.com *.googleapis.com                                          cdn.cookielaw.org service.force.com www.googletagmanager.com js.hsforms.net js.hsadspixel.net                                          *.vimeocdn.com js.hscollectedforms.net js.hs-banner.com js.hsleadflows.net api.hubapi.com                                          www.google-analytics.com js.hs-analytics.net snap.licdn.com px.ads.linkedin.com *.salesforceliveagent.com                                          *.googleapis.com www.recaptcha.net www.gstatic.com www.datadoghq-browser-agent.com                                          rum.browser-intake-datadoghq.com *.bluesnap.com pay.google.com                                          stats.g.doubleclick.net fresnel.vimeocdn.com api.feedback.us.pendo.io                                          forms.hsforms.com assets.adobedtm.com hubspot-forms-static-embed.s3.amazonaws.com consent.truste.com *.insights.confirmation.com *.visa.com                                          *.aexp-static.com *.mastercard.com *.discover.com *.kaptcha.com *.discovercard.com *.online-metrix.net *.confirmation.com *.cdn-net.com *.americanexpress.com *.cardinalcommerce.com  *.convertlanguage.com confirmation.my.salesforce.com *.pendo.io;                              worker-src blob:;                              img-src     'self' data: *.confirmation.com *.wpengine.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.truste.com *.vimeocdn.com                                          forms.hsforms.com fresnel.vimeocdn.com app-data.gcs.trstatic.net api.feedback.us.pendo.io *.linkedin.com p.adsymptotic.com                                          pay.google.com *.visa.com www.gstatic.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.convertlanguage.com *.hsforms.com *.discover.com *.kaptcha.com *.cardinalcommerce.com;                                                           style-src     'self' 'unsafe-inline' *.wpengine.com cdn.cookielaw.org service.force.com *.vimeocdn.com *.confirmation.com confirmation.my.salesforce.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com ;                                                           connect-src    'self' ws: wss: blob: *.hubspot.com  *.gstatic.com wss://*.intercom.io *.split.io https://*.intercom.io                                          *.wpengine.com *.google-analytics.com api.feedback.us.pendo.io *.confirmation.com api.hubapi.com                                          *.amazonaws.com forms.hsforms.com pay.google.com *.visa.com www.gstatic.com *.discover.com *.cardinalcommerce.com                                          *.discovercard.com wss://127.0.0.1 *.confirmation.com wss://localhost *.americanexpress.com *.mastercard.com *.aexp-static.com *.bluesnap.com *.kaptcha.com https://google.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.cookielaw.org cdn.cookielaw.org *.onetrust.com  *.linkedin.oribi.io *.hscollectedforms.net stats.g.doubleclick.net https://*.google.com https://google.com;                                 font-src     'self' data: *.confirmation.com *.intercomcdn.com *.wpengine.com *.bluesnap.com *.mastercard.com *.visa.com *.discover.com discovercard.com *.aexp-static.com *.kaptcha.com *.discovercard.com *.americanexpress.com *.cardinalcommerce.com pay.google.com;                                                           frame-src     'self' *.vimeo.com *.google.com *.intercom.io *.docusign.com *.docusign.net *.visa.com pay.google.com *.aexp-static.com *.recaptcha.net                              *.mastercard.com *.discovercard.com *.online-metrix.net *.americanexpress.com *.bluesnap.com *.kaptcha.com *.cardinalcommerce.com www.datadoghq-browser-agent.com rum.browser-intake-datadoghq.com *.confirmation.com confirmation.my.salesforce.com *.force.com *.discover.com *.pendo.io;
Date: Tue, 23 Apr 2024 15:36:04 GMT
Content-Length: 19533

HTTP/2 200 OK
date: Tue, 23 Apr 2024 15:36:05 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 878eed5a59cc7131-OSL
content-encoding: gzip
X-Firefox-Spdy: h2