HTTP/1.0 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Age: 3154460
Cache-Control: public, max-age=0, must-revalidate
Content-Disposition: inline
Content-Length: 35686
Content-Security-Policy: default-src 'self' https://atdbio.com https://*.atdbio.com https://*.vercel.app; prefetch-src 'self' https://atdbio.com https://*.atdbio.com https://*.vercel.app; manifest-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com https://*.google-analytics.com https://*.lfeeder.com *.hs-scripts.com https://*.hotjar.com https://*.usemessages.com https://*.hs-banner.com https://*.hs-analytics.net https://*.hsadspixel.net https://*.hscollectedforms.net https://*.hsleadflows.net *.googleadservices.com https://*.g.doubleclick.net https://*.jsdelivr.net https://*.google.com https://*.googleapis.com https://*.usemessages.com; script-src-elem 'self' blob: 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com https://*.google-analytics.com https://*.lfeeder.com *.hs-scripts.com https://*.hotjar.com https://*.usemessages.com https://*.hs-banner.com https://*.hs-analytics.net https://*.hsadspixel.net https://*.hscollectedforms.net https://*.hsleadflows.net *.googleadservices.com https://*.g.doubleclick.net https://*.jsdelivr.net https://*.google.com https://*.googleapis.com https://*.usemessages.com; worker-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com https://*.google-analytics.com https://*.lfeeder.com *.hs-scripts.com https://*.hotjar.com https://*.usemessages.com https://*.hs-banner.com https://*.hs-analytics.net https://*.hsadspixel.net https://*.hscollectedforms.net https://*.hsleadflows.net *.googleadservices.com https://*.g.doubleclick.net https://*.jsdelivr.net https://*.google.com https://*.googleapis.com https://*.usemessages.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com; img-src 'self' blob: data: *; media-src 'self' blob: data: 'unsafe-inline' https://atdbio.com https://*.atdbio.com https://*.vercel.app https://stream.mux.com https://*.fastly.mux.com https://*.gstatic.com; connect-src 'self' https://atdbio.com https://*.atdbio.com https://*.vercel.app https://*.google-analytics.com https://*.hubspot.com https://*.hubapi.com https://*.g.doubleclick.net https://*.mux.com https://*.hs-banner.com https://*.sentry.io https://*.ingest.sentry.io; font-src 'self' data: https://fonts.gstatic.com; frame-src 'none'; child-src 'self' blob:; form-action 'self'; object-src 'self'; frame-ancestors 'self' https://atdbio.com https://*.atdbio.com https://*.vercel.app; base-uri 'self'; upgrade-insecure-requests; report-uri https://o357545.ingest.sentry.io/api/6230574/security/?sentry_key=6f12e9ff38414a5faba8ec25942bf7b4&sentry_release=master@v1.12.2&sentry_environment=production
Content-Type: text/html; charset=utf-8
Date: Wed, 31 Aug 2022 22:55:16 GMT
Etag: "b1bf9be890a6a1bfa0295747b7e47ca1"
Server: Vercel
Strict-Transport-Security: max-age=63072000
X-Content-Type-Options: nosniff
X-Frame-Options: deny
X-Matched-Path: /
X-Vercel-Cache: HIT
X-Vercel-Id: cle1::nnwdq-1661986516775-c9f1282cbc7c