bcsf.com website report

HTTP/2 200
date: Mon, 26 Oct 2026 02:50:51 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
vary: Accept-Encoding, Accept-Encoding,Cookie
link: <https://bcsf.com/wp-json/>; rel="https://api.w.org/", <https://bcsf.com/wp-json/wp/v2/pages/73>; rel="alternate"; title="JSON"; type="application/json", <https://bcsf.com/>; rel=shortlink
x-powered-by: WP Engine
x-cacheable: SHORT
cache-control: max-age=600, must-revalidate
x-cache: HIT: 1
x-cache-group: normal
last-modified: Mon, 26 Oct 2026 02:50:51 GMT
cf-cache-status: HIT
set-cookie: __cf_bm=TUrwbuHG1WVxz1vDWpoenIszWJgEvN96U6Iwbn3ZRhI-1792983050.9416142-1.0.1.1-9MBWq6PeZk8zVcaMGuVSn2jvhOceXgIoEP1cVl8tCxthaF3zmVi4zmG2ex4REQoP34SBWlyOIUIhVPd7ve819dQc.IeqF_J2_.Dd8w8WJ9HgpW7QKU6rV4VL5mlew7DV; HttpOnly; SameSite=None; Secure; Path=/; Domain=bcsf.com; Expires=Mon, 26 Oct 2026 03:20:51 GMT
content-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.buzzsprout.com https://*.doubleclick.net https://*.pardot.com https://*.ringcentral.com https://*.facebook.net https://*.juicer.io https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://js.hs-analytics.net https://*.hs-scripts.com https://js.hs-banner.com https://snap.licdn.com https://tags.srv.stackadapt.com https://cdn.cookielaw.org https://seal-chicago.bbb.org https://cdn.mouseflow.com; style-src 'self' 'unsafe-inline' https://*.buzzsprout.com https://use.typekit.net https://p.typekit.net https://cdn.cookielaw.org https://www.gstatic.com https://tags.srv.stackadapt.com https://fonts.googleapis.com; img-src 'self' data: https://*.buzzsprout.com https://*.googletagmanager.com https://*.facebook.com https://bcsf.com https://cdn.cookielaw.org https://seal-chicago.bbb.org https://www.gstatic.com https://px.ads.linkedin.com https://track.hubspot.com https://tags.srv.stackadapt.com https://secure.gravatar.com https://plugin-updates.wpengine.com https://carebasic.com https://*.carebasic.com https://essentialcare.com https://*.essentialcare.com https://bcsrisknavigator.com https://*.bcsrisknavigator.com https://4everul.com https://*.4everul.com https://pif.com https://*.pif.com https://i.ytimg.com; font-src 'self' data: https://use.typekit.net https://fonts.gstatic.com; connect-src 'self' https://*.doubleclick.net https://*.buzzsprout.com https://analytics.google.com https://www.google-analytics.com https://track.hubspot.com https://px.ads.linkedin.com https://tags.srv.stackadapt.com https://geolocation.onetrust.com https://cdn.cookielaw.org https://yoast.com; frame-src 'self' blob: https://*.buzzsprout.com https://www.google.com https://www.gstatic.com https://www.youtube.com https://www.youtube-nocookie.com; worker-src 'self' blob:; manifest-src 'self'; media-src 'self' data: https://*.buzzsprout.com; form-action 'self'; upgrade-insecure-requests
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-site
permissions-policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), usb=(), xr-spatial-tracking=(), fullscreen=(self "https://www.youtube.com" "https://www.youtube-nocookie.com"), picture-in-picture=(self "https://www.youtube.com" "https://www.youtube-nocookie.com"), encrypted-media=(self "https://www.youtube.com" "https://www.youtube-nocookie.com")
referrer-policy: strict-origin
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
content-encoding: br
cf-ray: a50627e469afdb78-CDG
alt-svc: h3=":443"; ma=86400