HTTP/1.1 200 OK
Server: Cowboy
Connection: keep-alive
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
X-Dns-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
X-Download-Options: noopen
Surrogate-Control: no-store
Cache-Control: max-age=12997
Pragma: no-cache
Expires: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Content-Security-Policy: upgrade-insecure-requests; frame-ancestors 'self' https://secure.blooom.com; form-action 'self' https://api.blooom.com; object-src 'none'; base-uri 'self' https://optimize.google.com; report-uri /api/log_csp_event
X-Content-Security-Policy: upgrade-insecure-requests; frame-ancestors 'self' https://secure.blooom.com; form-action 'self' https://api.blooom.com; object-src 'none'; base-uri 'self' https://optimize.google.com; report-uri /api/log_csp_event
X-Webkit-Csp: upgrade-insecure-requests; frame-ancestors 'self' https://secure.blooom.com; form-action 'self' https://api.blooom.com; object-src 'none'; base-uri 'self' https://optimize.google.com; report-uri /api/log_csp_event
Content-Security-Policy-Report-Only: report-uri /api/log_csp_event
Set-Cookie: blm_usr=0; Max-Age=31536000; Domain=.blooom.com; Path=/; Expires=Mon, 19 Oct 2020 01:05:35 GMT; Secure
Set-Cookie: blm_usr_guid=mkt-1dfb5353-3cc4-4439-b064-b14b3c36fef7; Max-Age=31536000; Domain=.blooom.com; Path=/; Expires=Mon, 19 Oct 2020 01:05:35 GMT; Secure
Content-Type: text/html; charset=utf-8
Content-Length: 99898
Etag: W/"1863a-C+heVO5aLtNCB186CL/RVxPehhw"
Vary: Accept-Encoding
Date: Sun, 20 Oct 2019 21:28:59 GMT
Via: 1.1 vegur