HTTP/1.1 200 OK
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-type: text/html; charset=utf-8
expires: -1
x-frame-options: SAMEORIGIN
set-cookie: ::Language::=en-US; expires=Fri, 28-Feb-2020 03:35:11 GMT; path=/
referrer-policy: strict-origin-when-cross-origin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-max-age: 3628800
access-control-allow-headers: Cookie, accept, origin, x-request, Content-Type, Accept, X-Requested-With, withCredentials
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
p3p: CP="CURa ADMa DEVa TAIi PSAi PSDi IVAi IVDi CONi HISa TELi OUR IND DSP CAO COR"
content-security-policy: default-src 'self'; frame-ancestors 'none';               frame-src 'self' *.facebook.com;               script-src 'self' data: *.prizelogic.com *.plcontent.com 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ajax.googleapis.com connect.facebook.net;               style-src 'self' data: 'unsafe-inline' *.prizelogic.com *.plcontent.com fonts.google.com fonts.googleapis.com;               img-src 'self' *.fbcdn.net *.facebook.com data: *.plcontent.com www.google-analytics.com stats.g.doubleclick.net;               connect-src 'self' *.prizelogic.com *.facebook.com www.google-analytics.com stats.g.doubleclick.net;               font-src 'self' data: fonts.gstatic.com;
feature-policy: accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none'
date: Thu, 27 Feb 2020 03:35:11 GMT
content-length: 27201
strict-transport-security: max-age=63072000;includeSubDomains